It strikes me that the benefit from the ECC508 chip is that it provides "absolute" secure storage for the certificate(s), something that cannot be assured in software on the M0 on the MKR1000. It is a pity though that the data path takes the SPI through the M0 instead of directly to the WINC1500.