Samsung knox chip in its latest flagships is EAL6+ certified. They can use (or might be already using) it for hardware root of trust, e-SIM, EMV payments.