If I recall correctly, the JavaCard standard is what's used in most PGP/GnuPG hardware tokens, e.g. Yubikeys, Nitrokeys, etc., none of which currently support E

If I recall correctly, the JavaCard standard is what's used in most PGP/GnuPG hardware tokens, e.g. Yubikeys, Nitrokeys, etc., none of which currently support EC crypto due to the limitations cited in the OP. So movement on this front could make for a real advancement in hardware crypto token functionality.