re: What makes you think that the security co-processor has to be a separate entity from the main processor?
If it was an Intel CPU, I can assure you the IP for the security engine will be owned and controlled by Intel Corp., if (and that is a very big "if") the security functionality were to be included in the main processor.