@arthursonzogni
This demo shows that the renderTime of a cross-origin image is leaked. It works by displaying a cross-origin image and a same-origin image at the same time. Chrome will usually wait for both images to be decoded before rendering the frame.
This is described in the feature: Expose coarsened cross-origin renderTime in elment timing/LCP