Why cap it at all?

If you can process 512 then you get access to those, else you don’t.

Let the free market decide where it’s comfortable like it did with wireless security.