Thank you, but I’ve read it before, several times, hence my original commentary - and for readability I’ve adjusted the image - please do not post images when you can copy & paste text.
The security of the node is up to the creator, it would only need to save the DevNonce if it was going to be certified, but then some storage may well be on board the device.
Not supporting SAMR34 because it doesn’t have internal NVM is taking a suggestion in the spec about how something should be done and extending outside of the reality zone of real life.