I've implemented a bootloader for the Pico W allowing code upload via WiFi: picowota; unfortunately this means having a copy of the WiFi firmware in the bootloader code, and another copy in the app code.
It would be good if there were a way to pass a pointer to the firmware binary to the cyw43 library(ies), so that one copy can be stored in the bootloader, and the app code can just refer to that.
This would be less relevant with #909, but may still be worth considering.