While I understand the role Mikrotik decided for their CAPs architecture (active controller instread of passive or hybrid), I will agree that having the whole network go down even for a simple update or reboot of the controller is annoying. This architecture makes the whole wifi network very dependent upon the state of the controller and thus it makes the addition of high-avaiolability mechanisms necessary for any serious deployment. For example, it would be better if the network could operational albeit with reduced functionality, while the “offending” operation (reboot, update, etc) is underway. Or a second controller with automatic state synchronization and seamless (no downtime) failover between the controllers.