Every product can be improved. It's a catch-22. If you want something better, then you opt for a controller solution. For example, in a school setting, you would want to segregate the teachers from the students. Additionally, you don't want the students accessing inappropriate websites. Moreover, you need to separate the servers where they store sensitive information. Aruba Instant does a fine job with these requirements. However, in a corporate environment or a larger network, where more advanced filtering or MAC-based filtering is needed, I don't think the IAPs would be sufficient. The solution might not connect in a real enterprise setup.