Safety with wireless MCUs with internal ROM
Well, you can't. Simply too many places to hide it. What you can do is look at its external communications and see if there's anything unexpected there. Maybe take a look at your supply chain.

It's possible, but expensive, to dismantle a unit and reverse-engineer its ROM contents to look for suspicious programs. Or entire other hidden processors. But that only tells you about the one you dismantled.