When we report the number of drop-pending idents in storageEngine serverStatus section, we build a set of every ident name, only to count the result. We also do this while blocking any idents from being dropped.
I've seen customers with drop-pending idents in the hundreds of thousands, and this would probably explain poor performance that they saw. As the number of idents grows, the longer we hold that mutex, which further delays ident drops...