Suggestions for End-User device onboarding?

We are utilizing the M404x board, which supports both cellular and WiFi connectivity. Users initially set up their devices by scanning a QR code or entering the coreID found on a sticker inside the device. Upon first setup, the M404x automatically connects via cellular network.

Through their user interface, users have the option to add WiFi credentials and to enable or disable WiFi. When they update the WiFi settings, a Particle function transmits the new credentials to the device and reboots it with the updated settings, and uses wifi.prefer for automatic connection management. Even when WiFi is preferred, the cellular connection remains as a failsafe. This method has been effective for us.

When WiFi is disabled, the WiFi module is powered off to conserve energy.