Yes, there should be a defense against device simulations. For example, a manufacturer can insert its root private key in the devices and use it for additional signing.
And at the same time it must prevent leaking of such key.
Not to mention that leaking of such key could happen from the hardware too.