for this cases i recently cease to recommend CCR1xxx because the newer ARM CCR2xxx have much better single thread performance, which can be useful for a single PPPoE interface use case
in the specific case of CCR1009-7G-1C-1SplusPC be aware this passive cooling version has even less single thread performance because cpu clock speed is 1.000 mhz, 200mhz less than active cooling models
i think RB5009UG+S+IN is a good bet with their 1.400mhz cpu clock, but some scenarios can benefit of ccr2004-16g-2s+ with 1.700mhz cpu clock but much more expensive(in this case avoid passive cooling version because lower clock speed)
and at least but not last the ccr2116-12g-4s+ which is the most of the most in single thread performance with 2.000mhz cpu clock
Note: Please note that rb4011, rb5009, ccr2004, ccr2116 not only have more CPU clock, but also have an architecture that does more work per clock cycle called out-of-order execution which gives them the potential to have even more advantage over the ccr1xxx tile that has in-order execution
another difference between different tiers of MikroTik devices is system memory bus bandwidth which in some cases can help to improve performance in specific scenarios beyond only cpu clock: