Hi Sulaiman,
My answer is based on field experience, this two options was suggested (as best practice) and approved from our internal VMware ALB Architects and PSOs. I saw used both of them in many of my costumers without any problem or disruption. Remember: if you want add a SE you need available licenses to do it, if the customer dosn't has?
I hope that my experience can help the community.
Best.
