I have to review it by myself when they come to the office. But from what I've read since this is already using openwrt, I think they use in their main UI the basic openwrt upgrading commands, so I think that you can basically flash straight from there.
What I'm not confident if it would be possible to trigger a TFTP without soldering.
that's the part I've been trying to figure out, uboot is more future proof, since most vendors won't update it once the device is shipped, while you can add new checks in a stock fw upgrade.
That's supposed to be that way. Can you issue some of the other generic OpenWrt failsafe commands like mount_root? This should give you full access to all files.
The ! means the account login using a password is disabled, see shadow(5).
If the password field contains some string that is not a
valid result of crypt(3), for instance ! or *, the user will
not be able to use a unix password to log in (but the user
may log in the system by other means).