It has a high quality dedicated secure element. Qualcomm SPU is present but it's configured to use the dedicated secure element. We would be fine with supporting a budget device with only the SPU but we're quite happy we don't have to accept that compromise for the initial flagship.