For A, yes, you need to ensure the vendor is reputable and that their testing is trustworthy. Espressif, however, moves a lot of chips and I think it is safe to

For A, yes, you need to ensure the vendor is reputable and that their testing is trustworthy. Espressif, however, moves a lot of chips and I think it is safe to assume the manufacturer is reputable if they are supplying other well known ESP32 hardware - can maybe check importyeti to see who other people are using. For B, yes, you are correct, but my understanding is that as long as you don’t have any other “intentional” emitters (for example Wifi or BLE) you only need the unintentional if your device is battery powered or uses a certified power supply. Then it should be quite cheap and simpler to get the full certification (think $500-$1000 instead of an order of magnitude more)