If crypto ends up being the thesis, measure what TLS actually costs on your boards before you assume it’s too heavy. An ESP32 holds a TLS connection fine. A 328P with 2 KB of RAM is a different story, and that difference could be a chapter on its own.