With respect, I'm sure many of us here have developed commercial software, and I'm sure many of us here have had to use protection systems at the request of contractors/employers, but appeals to authority don't really work when none of us know what qualifications or experience whoever did the testing has either.
Denuvo, at least pre-v4, certainly did do a check on boot to ensure the ID of your hardware matched the ID of your software, but the pure digital rights management checking element is only a small part of Denuvo and the anti-tamper system is the key portion that differentiates it from other pure-DRM systems.
Going from quotes of the people who've actually cracked Denuvo, its anti-tamper system includes large amounts of obfuscation, including using the very traditional method of executable compression, which has always had, and still does have, an inherent performance penalty.