Right now, all provisioned machines use only the configurations assigned to user_data at creation time, any further changes have to be applied through talosctl.
The talos provider appears to provide the ability to apply any modifications to machine configurations in the form of talos_machine_configuration_apply.