Since my X7-35V self destructed... I have been stuck with 2 wAP AXs for a few weeks...
Running 7.19.4 and I was able to add passwords, VLANS, and labels to several entries. Put all them under MultiPassphrase group. Then went back into configs and selected multipassphrase group and WPA2 as the Authentication type.
Have multiple devices connecting to the same SSID with different passwords. Even adding VLAN tags. Registration IDs devices. Not bad.
No CLI required.
Back to the roots ? 
I am often swayed by the darkside. Then I get burned by a deep seated bug that wasn't addressed for several years.
Would I really like to take a look at the Router and see that instant feed back? You bet.
Would it be awesome to get wireless access points for less than $200? I could get so many more sites up an running.
But sooner or later I hit something that smacks me back to reality.
I understand your position but in all honesty I must say I have little to no issues with my setups, all using MT wifi.
But probably I am blessed having (mostly) relatively interference free environments (except for one, right next to an airport with lots of shops surrounding that one location).
Also why I asked about wireless client isolation. As I need to check the boxes to see if Mikrotik can even "do" what we need it to.
Welcome back to the dark side 
Honestly I'm really, really happy with my wAP axes at home so I decided to setup my new office with 3 or 4 of them.
IMHO Mikrotik wireless got stable enough for SOHO use. (PPSK on Mikrotik is more stable than on Unifi that I setup at my parents place.)
Also I installed hAP ac2 and cAP ax on two sites for our client (Nothing fancy, just wifi for receptionist, guests and few cameras) and so far so good, no complains for now.
Remember... I have been using D-PSK for over a decade on Ruckus.
And EPSK was made for me by cambium after I showed them how I was using an access control list in old caps-man. Got about 5 years with them now.
Pretty stable until this new 7.x firmware. But I showed them and how to preproduce it... its on the fix list for the next release.
UniF--k... you recall how I feel about the fans. The products have issues... but the FANS.... insufferable.
And if I walk between interfaces... the Label in the registration goes away.
I can see what password the devices is using by a label. When I first connect I see that label. If I roam to another AP... that label goes away.
Yea, I remember about Unif..k 
Also my parents UGC Max is fanless and it's running at a toasty 85°C at winter and 88-90 now at summer so I expect that it will not last long...
Honestly I never noticed that label goes away when device roams from one AP to another because I never looked at registration tab once I got PPSK to work. But that is clearly a bug IMHO.
And another one...
The first time I enter a PPSK key the connection shows no internet. Then I have to select it again and not do anything else... then my phone connects.
Yea, also if you go to forget network and you enter passphrase for another VLAN it will not connect but ask you for a passphrase again and when you enter it it will connect without a problem.
Confirmed
I think I even opened a ticket with Mikrotik about that and after some update it was fine, at least I didn't noticed anything but now I see that the old problem is back.
Handled about as fast as the CRS354 port problem?
Nah, I reported that problem went away... Too soon... And at the time I didn't know anybody else that's using PPSK to see if problem is present at the other users.