> If what you need is the management of 16 different NIST P-curve keys and nothing else

You can put AES keys in the slots and have the IC perform operations with them.

> and you don't necessarily care if the whole package is secure against DPA, that part is a cheap way to get that.

Go get the NDA datasheet.

> (HSM out of ARM core alone)

We agree here.