Are CAPsMAN certificates useless with DHCP?

Question

Computer networks

CAPsMAN (from MikroTik) has certificates that can be distributed to access points, and then turn on the "Require Peer Certificate" checkbox and do not issue more new certificates. In theory, this should protect the network from connecting new access points.
But what prevents any jurez from connecting his router to the network (by simply plugging a wire into some switch in the corner) and, when his router receives everything he needs via DHCP, to get his access point in the end?
What is the point of certificates then?

Answer 1

www.univers-spb.ru/about/news/index.php?news=391#C...

Answer 2

The question is actually not about CAPsMAN at all, but about network security in general? Well, everything that usually interferes with the connection of laptops brought from home - binding poppies to ports, restricting poppies in DHCP. Another thing is that this is a dreary and troublesome business, and in Soho they usually don’t fool around at all ...