I think this is good to point out, but I feel like you left out the reason why this is so. Mikrotik allows installing of both SwitchOS and RouterOS. The CRS is a switch. That means it can do vlan-aware switching between all its ports, and it’s a managed switch. It has ASICs that can do line rate switching of 10gbe on all ports simultaneously. You can use it as a router (NAT is something a router would typically be responsible for) but that will be super slow because it’s not using the switch hardware. The CCR2004 is a totally different type of product. It’s a router, not a switch. It can do NAT faster because it has a faster CPU, but it also can’t switch at line rate across all its ports simultaneously because it doesn’t have the ASIC switching hardware. Mikrotik is good about providing both the switching and routing performance metrics, but it’s kind of unclear unless you know what you’re looking for.