You'd agree what we could probably identify (b),(c) from the power usage though, no?
Early board photos showed an exposed JTAG header. Just hook it up and query for IDCODEs.
If they did a custom chip it can obviously ignore the IDCODE request or lie, but if they're using a commercial FPGA they can't change this behavior. The chip will tell us what it is.