Hi @marek-trmac
it loads the reset vector from the 0x30002004. It founds reset vector 0, so SEC tool assumes it is non XIP (load-to-RAM) image.
It seems the image format is different than SEC tool expects. Can you please confirm? Can you provide more information, where the interrupt vector table is located?
I have .vectors section that has VMA @0x00000000 (so it is located into ITCM) but has LMA in flash. This is for performance requirements.

the LMA address is decided by the linker (in this case is 0x300508c4) and I don't think there is any way to force it.
This is a completely legitimate scenario that therefore must be covered by SPT, or the documentation must clearly describe what the constraints are on the use of the tool.
Either way being the possible scenario, NXP must describe a way to deal with it.
So in my opinion the way to get the entry point is another way, and here I link to another statement you made:
For S19, the entry point is explicitly specified in the S19 file, so there is no such issue.
Even in elf the entry point is specified:

so it's possible to get the entry point from the.elf instead of reading it to a specific address in the flash.
In fact, it's possible for design requirements that you may need to move the interrupt vector to other addresses as well (e.g., 0x30004400), and even then it couldn't work.
best regards