I was looking some of the competitive products and think Mikrotik have an amazing configuration provisioning tool - CAPsMAN.
But maybe this can be extended in the future with abilities to provision configuration to any available Mikrotik device - switch, router, firewall and APs.
Yes this can be a burden and for the small devices. The other option in such case is to be created additional product - a controller which can do this and more (web dashboard, dude integration, AD & 2FA integration and so on).
Yep... I know this is a push MT to go in the areas where the "big boys" play - Fortinet, Aruba, Cisco... and this cannot happens overnight.
In this case maybe cannot be named CAPsMAN but NETsMAN or DEVsMAN :-) no idea ... my naming ideas are as wild as yours :-)
What do you think about such thing?