You can't just drop in a generic storage IC which are cheap and plentiful.

You need one with a certain degree of verified _good_ encryption mechanisms built in. You do not want it ever communicating with the processor in plain text if you are selling a security device.