I just found it's still possible to do the AEC-CCM encryption/decryption in react-native-quick-crypto, based on my test. So we can still reach Goal #2 on mobile clients.
react-native-quick-crypto