The threat model is heavily based on tamper-resistance of the devices. But I don't think it can't survive.
Also, tampering the device can ruin the network, but it can't print new money.
Also, tampering the device can ruin the network, but it can't print new money.
For example, you can assume that there is a fixed amount of money initially distributed somehow (many cryptocurrencies do just that).