[TF-A] Who better implements a safe environment: cortex-M or cortex-A?

Hi,

Can someone explain to me why it is easier to implement a secure TrustZone environment with secure boot and storage and PSA certificate in cortex-M than in cortex-A?

Who better implements a safe environment: cortex-M or cortex-A? Why?

Thanks.