Factory testing: can we access "tinker" functions via USB for an unclaimed device?

the only thing open for me is when to flash bootloader after device-os and when it is safe to do the other way (which is faster as it has less steps). anyone any insight?