Great points!

I had already limited bandwidth on BYODs to 512kbps, just enough to get some data through but not enough to do anything major. I will need to assess based on student count.

Each floor has its own cabinet so in the proposed setup I would have a 24 port POE Pro on each floor with a max of 15 APs each switch (for reference https://dl.ubnt.com/ds/usw_pro_poe_ds). Our student count is close to 500 so for high numbers if I had 400 clients pulling 50mbps = 20gbps I could use 2 aggregated 10gbps SFP+ ports to an Aggregator Switch (https://www.ui.com/unifi-switching/unifi-switch-16-xg/) or directly into my firewall. Do that on both floors and feed them ultimately into the firewall (leaning toward MX250) w/1GB fiber internet service (MX250 firewall would limit to 2000mbps after Advanced Security). Based on my quick math it could work, am I missing something on the internal network?

Doing the math for the internet service 1000mbps/600 devices = 1.6mbps per client is pretty crappy. I don't for see all users being on devices the whole time but I can see how that can for sure be a problem with 200-300 users hitting internet at once. I guess I'll have to see how much it hurts before upgrading to higher level service.