To protect the device getting cracked, couldn't you just have it send a message if/when the device is opened in a way it shouldn't (e.g. for inspection) and thus make that key invalid?
Sure and maybe that slows people down a bit, but the second device they get their hands on they’ll be smarter. This isn’t a new issue, look at video games, look at blu ray and hd dvd, security against a sophisticated attacker with physical access is almost impossible. It’s rare for video games to last 1 week before being cracked, and that’s not even for something important.