Some silicon labs arm MCUs and radios have hardened crypto core and hardened bootloaders. Their closest equivalent to the esp32 is the wgm160p but it lacks Bluetooth and costs more.

Disclaimer: used to work there but this is all public information