I think I found the ideal method, it's repeatable, quick, and very easy to implement and use.
There are flaws, especially at higher leakages, but it should cover most bases.
I'll have to see the behavior on different IEMs and drivers to check if the leakage conditions are representative enough to point out differences in leak tolerance, but this seems promising.