For the Outdoor ONT/NID, I really think you guys did most everything right. The only real glaring issue is that the ONT is non serviceable if there is a device failure. Having to rip/replace the entire enclosure if there is a device failure is a pretty wild ask. Rather than pulling the failed ONT (remove POE power, unplug fiber jumper, remove ONT) then reinstalling, This design introduces too many potential failure scenarios to be feasible for deployment.
Having to pull down the whole NID, mess with the fiber service loop and remount could be so much simpler. This turns a 2 minute fix into too much of a variable. My suggestion is to make the ONT part of the outdoor setup serviceable.