Yes, OCB is still around 50 % faster than the next best[1] AEAD (which is AES-GCM) and almost 3x faster than Chapoly on current x86 and comes pretty close to 10 GB/s/core on a desktop CPU. That being said, all of these are really, really fast in absolute terms, way beyond line-rate even for 10 GbE, which is a measly 1.2 GB/s. In practical terms, all of these modern algorithms are so fast (with hardware support for AES) that very few applications will see a significant burden from symmetric crypto, so you can choose pretty much whatever you feel comfortable with. EtM was usually quite a bit worse, as the hashes used for hMac were usually much slower in comparison. Though Blake3 would seem to eliminate that concern.
[1] in terms of performance, on a modern x86, with AES-NI
> More and more both personal computers and servers are using ARM CPUs without AES acceleration, though.
The RPi SoC is an exception here - most ARMv8 SoCs should have AES instructions.
> Also, write speeds of modern SSDs comes to be over 5 GBps.
True, but I don't think the expectation is to utilize that throughput with a single application, rather, to still have fast I/O even under load or with multiple applications, and to satisfy burst I/O quickly.
[1] in terms of performance, on a modern x86, with AES-NI