How do you know that someone is the spouse of the deceased employee at the time of death? You have that person prove it by a statement signed by them, and perhaps a marriage certificate. But there could have been an intervening divorce. In the end, you are relying on what the person claiming to be the spouse signs to that effect, and plan officials not knowing any facts to the contrary.
I would agree with the ERISA counsel you have drafting the plan (but then, hey, I am lawyer too, and just watching the back of another Bar member

). Seriously, I do agree with the ERISA counsel. I would suggest that you (and the recordkeeper) take a look at the U.S. Supreme Court's decision of January 26, 2009 in Kennedy v Plan Administrator for DuPont Savings and Investment Plan. If the plan has a procedure for requiring that the son applying for the death benefits verifies that he is the only child of the deceased employee, then that ought to be sufficient if the plan officials have no reason to know of other children.
If it is not, then even elevating the estate ahead of a 'spouse' would follow from the same logic.