Just a quick follow-up: With Paul_123's solution all the sorted modules can be moved out of the rootfs, of course.
Another alternative is to keep step 2 (i.e., all alien kernel modules go into the bloated rootfs) but change step 4: Instead of editing .dep files, create dummy extensions (wireless-5.10.0-9-amd64.tcz, graphics-5.10.0-9-amd64.tcz, etc.) and place them into tce/optional just to satisfy dependencies.
Ok, time to put my system back together. Vanilla TCL is the best.