I couldn't leave it alone
The offset (difference between shorted and open inputs) was > 26uV (Fluke spec is 2uV) and the zero point did still tend to drift a little.
I've added Randy Evans' opamp mod that dgminala brought to my attention but I didn't do the wholesale removing of the existing null amplifier, just lifted a couple of wires to bypass it and unplugged the transistors for the chopper driver (socketed transistors!)
I did change his opamp circuit though. There was no input protection on the LTC1050 so I've got jfets with their source and drains tied together as low leakage diodes to Vdd and Vss. They'll allow the input to exceed the power rails by 0.6 volts and the 'absolute maximum' in the datasheet is 0.3. Oh well, maybe theres some tolerance there. Low leakage input protection is hard! Dave had a video using two BJTs with their bases and collector all joined. I tried every bjt I could find around here and none would clamp lowered than 9 volts.
My other concern with Randy's mod was the amount of current available to the meter. Its a 100uA - 0 - 100uA meter and on overload (the above jfets conducting) the meter could get nearly a mA through it. Not sure abut how much these meters can take but I through that was a bit much. Theres a 3.9k resistor on the output (R225) which I split into two, 1.2k and 2.7k. At the junction of those two I've got two 1N4148 diodes clamping to earth. That limits the meter current to 130uA or so.
So its working again. The meter is very stable and my offset is about 4uV. Thats still more than Fluke's spec'ed 2uV but I suspect that might be the tiny leakage through the jfets. Waving your hand past the input connector can cause the needle to deflect nearly full scale (the opamp input is completely floating) so I'm not too worried.
I put 30 volts into it on the 1 volt range with the null selector in the most sensitive position and the opamp survived as did the meter.
Murray