I wonder if a epoxy/resin potting would solve this sort of attack. Or active tamper response that fries the board if someone tampers with the case.

It would make the tampering more expensive, but not too expensive given the 100 million dollar reward, while also making inspection of the device practically impossible for users.

If you can't get to the insides without breaking it, the only devices verified to likely be safe would be unusable too, so the product would in practice be even more unsafe.

If the user first inspects it and then glue it on their own, that would work, but it wouldn't solve this problem. Evil maid attack is something else and obviously harder at scale.