[rsaxvc]

One challenge - authenticity checks need to be done end-to-end(where we that end may be)

If you had such a chip, who would check it for authenticity? That check would need to be well secured, so likely not the ARM firmware on the nanovna itself.

Possibly not nanoVNA-saver: the unscrupulous supplier might just include an unlabeled CDR with patched software.