I have a hap ax2 (which I haven’t been able to configure successfully yet) to run WG for all my local devices.
I bought it because of the upgraded CPU & hardware encryption.
But I see the AX-lite has power supplied by USB-C, which would be very very convenient for me. In fact almost game-changing.
So I’m debating whether it would be a good option to grab the ax lite instead.
I see that it still has the IPsec hardware encryption, so that seems good. Is the 2-core CPU good enough for Watchguard?
Watchguard ?
Surely you mean wireguard ?
See this thread, I did some test for wireguard, zerotier and ipsec using ax lite.
http://forum.mikrotik.com/t/hap-ax-lite/164010/1
But if you already have ax2, I wouldn’t change !
Convenience is no match to increased performance.
Yes wireguard, haha. Betraying my previous life in network management heh.
Thanks, found that thread. The convenience comes from being able to run the device from USB powerbanks. Convenience is absolutely a substitute for performance. Performance is useless if you can’t power the device. With the USB-C input I can run it from a powerbank when there is no electrical socket available.
Again, it depends.
If you plan to use it as mobile solution, then I understand.
If to be used as fixed solution, stay with ax2.
Yes the idea would be to be mobile.. like, from the beach. I would say maybe mountain also, but let’s face it.. it’s just the beach. 
I see the DC jack on the Ax2 runs on as little as 12V, though.. might look into a USB-C with 12v barrel jack terminator too..