mostly because it looks up a load of config settings on each call, each of which is reasonably expensive. we don't even use auth_blocking on matrix.org. it needs to be made less inefficient.