crypto benchmarks STM32L4
NFC has an inherent protection against man-in-the-middle attacks


This is not true. There is absolutely nothing in NFC that would protect you from man in the middle attacks in any way.

Regarding your main question: doing ECDH on any modern microcontroller is much faster than your NFC link can transfer the data, so don't worry about performance here.