Private network access security can be defined by a unique WPA2 passphrase to grant access to devices and MAC address filtering to control authorized devices. Nowadays mobile devices are legion, so if one is stolen, the WPA2 passphrase is easily recoverable. So the router admin has to change the passprase and ask all users to change their connection on devices. Not so simple with family users whose skills are limited.
Would it not be useful to put one specific passphrase for each MAC address? With that option, if a mobile device is stolen, the admin just have to revoke the device and the associated passphrase, without changing anything to others.