My understanding is that patching either the client or AP can fix the problem, so it's strongly recommended to patch the AP/router for those clients that will never see an update, e.g. smart devices/IoT around the house, older TVs, bluray players, etc. where manufacturers have stopped supporting...