Does reading the RSR on boot tell you anything?
We have a battery operated core that sometimes resets more than once on power-up, due to low voltage detect, until the rather slow/weak supply stabilizes. We were unaware of this until we noticed the RSR bit often being set. Now to attempt to mitigate this (and chase out the LVD early, before it might cause harm), we turn on all high-current peripherals (internal and external) immediately on boot.
See 29.4.2 Reset Status Register (RSR)
The RSR contains a status bit for every reset source. When reset is entered, the cause of the reset condition is latched along with a value of 0 for the other reset sources that were not pending at the time of the reset condition. These values are then reflected in RSR. One or more status bits may be set at the same time. The cause of any subsequent reset is also recorded in the register, overwriting status from the previous reset condition.