My experience is very binary. I had some Mikrotik RF installs that Just Worked, and never needed attention. And some that were just problem children constantly demanding reboots.
Mikrotik code isnt the most stable beast in the world, but if you keep it at a certain point in time you are usually safe. But then that brings you back around to the security issues again.
How's that different from a Unifi AP? Unless they changed something in the past five, eight years, the software running on the AP is pretty much OpenWRT with the serial numbers hastily filed off. [0] Get a shell, and you get to download whatever to do whatever you need.
[0] Me coming to this realization is what lead me to switch over to OpenWRT. I didn't need any of the fleet management stuff provided by UniFi, and was constantly frustrated that the APs had to totally reboot whenever you changed nearly any setting on them. (I heard that they eventually fixed that particular shortcoming. Good for them, I guess.)
Cambiums shell from memory is much further locked down. IIRC you need a possibly predictable password form cambo to do get full root shell on a lot of devices.
If we're ignoring access-control-violating logic errors, then Mikrotik's shells are quite locked down. As you'd expect, you can provision multiple users with a variety of privs... and even make a user that has no configuration modification privs at all.
You can also very easily deny remote access to any credentials other than a username and SSH key. Good luck predicting an SSH key.
But if we're not ignoring coding errors that bypass access control, then I expect that Cambium is no less vulnerable than anything else out there. They're certainly using either BSD or Linux with some proprietary goop layered on top to make it look super sexy.
Their long-distance wireless and outdoor wireless are great, but their regular WiFI access points and software are at most adequate. They are not keeping up with the state of the art.
Does that mean that the performance is middling (making them -IME- equal to UBNT's APs), that they never have APs that use the very latest and greatest WiFi version, or both?
I think they've just given up on that sector, and they're focusing on more specialized outdoors/long-distance wireless.
I don't want to get into the Ubiquity ecosystem because it's typically all-or-nothing plunge. And I distrust complicated managed systems out of general principles.
They have several APs that have 2.5Gbit ethernet (one with a 2.5Gbit SFP+ cage), and one AP with a 10Gbit SFP+ cage. Additionally, all their APs run RouterOS, which means that you can bond links together to fairly-reliably get additional throughput. [0]
In regards to Wifi 6e and Wifi 7, it looks like Mikrotik takes quite a long while after a new Wifi version to release hardware that runs it. I expect your assertion that they've given up on 6GHz for home/small-office APs is incorrect.
[0] Yes, I've personal experience with using link bonding on Mikrotik hardware. As a knowledgeable someone would expect, it usually provides you with additional throughput proportional to the number of bonded links.
But I've just checked the Mikrotik hardware list, and I don't see indoor APs that are PoE-powered and have more than one Ethernet port. Maybe I'm overlooking something?
a) Who said anything about that? In the four comments prior to this one, that set of requirements wasn't brought up.
b) Yes, you are absolutely overlooking something. On the Products page, try expanding the "Features" widget of the "Product filters" section, checking the "PoE-in" option, and hitting the "Use filters" button. Even the AP I mentioned with the 10Gbit SFP+ cage has PoE in.
I tried again, and I see only mANTBox and NetMetal ax access points. Both are designed for outdoor deployment and would be very awkward indoors.
I'm not sure what you've done to only see those two APs. Based on your confusing report, it seems like you're also looking in the "Wireless systems" category. Try the "Wireless for home and office" category.
If you try and fail again, please do post the URL of the page you're looking at.
I definitely see more options now. Still not super great (no 6E), but definitely viable.