I think it remains unsolvable: you cannot plug the analog hole. Hardware device can be as secure as you like, but you can record your fake output to sign it and it suddenly becomes very genuine, I don't think it bumps the cost sufficiently.