Well,
The enterprise management system is nice, and can/disable based on Mac address, and also it uses radius to authenticate…if your on the guest network it’s captive portal and only allows Internet traffic through te gateway, all internal addresses are blocked, and last line is the guests use a separate vlan as well which is only allowed on the wifi routers and the gateway, denied on all regular network systems…
So, security isn’t an issue…it’s actually much better than a simple wifi password…