I know I’m about to get rotten fruit thrown at me… but if you’re finding this rig almost good enough and don’t use it for anything security-sensitive, disabling CPU exploit mitigations will get you a substantial boost (~20-30% additional IPC throughput).
Only go this route if you understand the repercussions; see Arch Wiki for details: https://wiki.archlinux.org/title/Improving_performance