We support all the authentication methods supported by the Mesh Profile 1.0.
The mesh_provision_server application shows various methods that device can support for provisioning. The MCU (Eg.ClientControlMesh) can configure the device to use or not to use static public key, and various authentication methods. Please have a look.
The device manufacturer decides an appropriate method based on manufacturing capabilities and desired user experience. For example, if the device is a door lock that includes an LED, then it would be possible to use the Output OOB authentication with the action that would blink that LED.