3 is not necessary, only internet is needed.
I would say that without nr.3 I cannot set the password for the access point. Without the access point protected by a password, I cannot connect Wi-Fi client.
However, now I cannot verify that anymore, as the factory reset is using the latest firmware. And I'm not going through the path of firmware downgrade to check that I leave it to the next one with old firmware.