I tweaked the encryption to AES-128-CBC on port 1196. It helped a bit (not significant), ie 1 or 2 Mbps on some initial testing), but I'll leave it that way for now.
Also, now that I have OpenVPN "ON" and restricted for use ONLY by the ROKU, which is working for unblocked content, does that...