Hardened address generation with BIP44 watch-only wallet with xpub
You are not deriving hardened child keys. You cannot derive hardened keys from an xpub. Just because the xpub itself is hardened does not mean that its children are.