Normally I'd say 90% of "enterprise" hardware is same stuff consumers get but badly tested, with more bugs, and in enterprise(rack etc.) format but this is something else.

Getting chip with hardware AES isn't even hard and they implemented 90% of what is needed (usb-sd card protocol and accepting the key), it's just wtf. Maybe they prompted "make a storage driver accessing SD card after unlocking with AES key" ;) bot device looks old enough to not be made with AI help.

Probably just "the MCU that was fast enough wasn't cheap enough", but the fact process didn't caught it should basically remove Lenovo as serious vendor from anyone's consideration