These devices will be given to trusted friends, so we need a way to authenticate the user before revealing the key.
Why reveal the key instead of doing the signing on the device itself? I don't think it takes much more than an esp32 to handle signing
They just need this to load to the phone. It's hard to imagine a homes person walking around with a phone AND a singing key connected at all times. The phone is enough. They just need a way to recover when the phone is inevitably stolen.
Homes -> homeless