Ive always throttled at the core router(ROS), all PPPoE terminated via IP tunnels from other APs (also mikrotik ROS). I (will) have another router that handles the wan pipe and overall QoS. my core router is a p4 1.6, 200 users with 35% CPU at peak time.
I try to keep all unnecessary traffic off the backhauls!