AIUI the RP2040 has -- as a deliberate design choice -- no security features: no secure boot, and no debug protection. That means it is incapable of offering any firmware integrity, or keeping any data secret at runtime.