I doubt it will work since the bootloader does not support booting of a different device, imho.
You can create an image of the whole storage by using dd and compare checksums then, if you like. If it is really tampered you will need to reflash the whole firmware using uboot anyway
exroot seems to require booting the device normally. Trying to avoid doing that.
I am looking at failsafe mode though and I'm seeing the board appears to have points for a serial connection. Would that work, and what would be the baud rate if it would?
The router has to boot normally. Then you set up exroot and all the changes will be in the USB.
When it has problems, you just unplug the USB and it will boot normal to the simple firmware.
If you want to clear the "normal firmware" totally and put everything including kernel etc to external storage, it is not possible.