Yes, Google penalizes slow websites. However, users penalize them as well by bounce rates, not visiting the site and not buying the products inside.