It totally depends on what type of traffic the WLAN's are serving. Some traffic types are recommended to be tunnelled. Tunnelling the traffic is also more secure. Agreed tunnelling adds load to the controller but we are taking about 7 x AP's on a controller capable of supporting up to 50 AP's