Reply To: Keeping the device secret on an SD card: bad idea or acceptable?

Difference is effort. Pulling a card is zero skill. Dumping flash is easy on an ESP32 too, unless flash encryption is on. With flash encryption + NVS encryption, a dump gives you garbage.