you also need to take into account that when clients fail to establish a connection to a hidden service, the user tends to hit refresh and try again. So when you take hundreds of users trying to establish a connection * Tor retrying to establish a connection several dozen times * the user refreshing and restarting the process , that = thousands and thousands of cryptographic operations for the introduction nodes, but the hidden services entry guards only need to process one create cell per successfully established connection.