most arm implementations default to software keystore if the dev is lazy. if it's not hitting the tee or a dedicated chip, it's just a hot wallet with a fancy ui. check the hal logs.
Spot on. If the key never touches a TEE, you rekeyed in userspace. That's just a hot wallet with extra steps. Inspect the syscall trace to be sure.
1