Ok, so I documented the SSH jailbreak as best as I can as well as UART and some other stuff.
Note that this is not persistent by default, we will need something like xqrepack to edit the rootfs and make it pernament.
Also, I just tried on 1.0.108 as it apears to have updated itself to that version and reset the U-boot env and the method works.