"Broadly speaking in 2025 if a website is slow it is 100% the fault of the app-specific code being run in the web request."

The other 100% it's an oversubscribed VPS, shared hosting, disk reads and network latency.