Changing firmware increasingly difficult? Smart Switch on T34 and QFN soldering

There are an increasing number of backplane relay modules on the market based on the T34 chip. The T34 is an integrated Wi-Fi chip that is a smaller version of the popular CB2S/CB3S/itd based on the BK7231N core. Although it is still the same chip from the software side, changing its software is more difficult, because in new devices there is no longer a derived serial port and you have to solder this chip in the LGA case off the board. Here I will try to show this process.

Let me remind you of the main topic about the T34: T34 datasheet, pinout, flashing and common mistakes - soldering to QFN pins, smart plug
In that topic, the T34 occurred in a version where you could solder wires to its pads:

Here it will be more difficult - access to the pads is not available! This means that we no longer have a "shortcut" and we have to solder the whole T34 off the PCB, and after programming it has to go back in place.

This topic will be special, because I will show it on the example of two relays. This type of gadget can be bought for as little as a dozen zloty, you get a tiny box:

There is a module and instructions inside:

Let's take a look inside:


There is no access to the pads mentioned in the subject line about T34 catalogue note .

We'll have something on this in a moment, but the construction of such a module can still be discussed briefly.
Here we have a single relay supplied with 5 V (JY3FF-SH-DC5V-A(K) or similar), a step-down converter providing 5 V from 230 V AC (after rectification), probably on a BP2525, an LDO AMS1117-3.3 providing 3.3 V from 5 V, and a title T34 together with an antenna on the PCB. In addition, some of these modules also support an RF control option thanks to an additional WF480RA IC in the corner of the PCB along with its quartz resonator and antenna.

Programming the T34
The purpose of changing the device's firmware is to free it from the cloud and to pair it conveniently with Home Assistant. Such a device can then also be freely programmed and developed like an Arduino.
We will upload our electrode firmware onto it: https://github.com/openshwprojects/OpenBK7231T_App
Uploading is done via the serial port.
Verification with the datalogue note shows that one of the UART pins needed for programming is not brought out here. You need to apply flux, ideally also protect nearby components with kapton tape and solder the T34 using hot air. The temperature and blow settings depend on the station - I always try to limit the blow, the temperature is not needed too high either. The board is small and has little heat capacity, it's not a big multilayer PCB from a laptop with huge copper spouts.

GPIO download:

After soldering, it can be seen that the TXD1 pad has no path:

This way we have the module soldered out. I necessarily advise against soldering thick wires to it - it is easy for it to tear off the pad, I have already been through this, I broke one circuit myself this way. It is better to make a stand, e.g. from a cardboard box, mark the first pin and then fix the wires to the stand (e.g. with hot glue) and solder to them:

You can also buy a QFN breakout board with a compatible number of pins and raster. I didn't have one on hand myself, but my method works too - I even took a souvenir photo while reading the Flash memory:

Another copy - another risky method, but again, wires to not break the pads:

We use our flasher and USB to UART converter for programming:
https://github.com/openshwprojects/BK7231GUIFlashTool
The programmer correctly discovers the GPIO configuration:

Then the chip goes back into place:

I do not reapply binder to such a layout. I just add a bit of flux, not too much, position it and heat it with hot air. With a bit of luck the layout sits and positions itself correctly. Sometimes it needs a little help with tweezers.

Tuya's JSON detected (GPIO configuration):

Verbal description:

We perform the rest of the configuration as usual.

Pairing with Home Assistant:



Summary
Unlike the previous thread about the T34 , this time the conclusion is different. This device is unlikely to be reprogrammed without using hot air - because how? Does anyone have any ideas? Without the derived pads, I don't see this as a possibility.
All this means that now having such, say, 5 modules, we have to solder the chip in the LGA 5 times, solder the wires to it, program it, and then solder it back in place.... well, at least a bit more people will practice working with SMD components.
Is there any way to make your job easier? There was one suggestion on Elektroda.com:

This is a printed adapter for programming the T34 without soldering. It simplifies the second step, as the T34 has to be further soldered and re-soldered from the PCB. Source: https://www.elektroda.com/rtvforum/topic4079733.html#21732349
Interesting concept, although it still requires probably the most difficult step.
How do you rate the level of difficulty of such a firmware change? Have you worked with components in enclosures such as LGA?