SCCM performance impact of AD-based collections vs WQL queries in enterprise deployment design

Hi, I’m working on the architecture design for a large enterprise merger where we’re standardizing software deployment through SCCM in a pretty complex Windows Server + Active Directory environment. There’s a bit of disagreement in the team because a senior engineer strongly argues that building device collections based on AD OUs and security group membership is inefficient and can seriously degrade performance during evaluation cycles, while I’m trying to understand how true that actually is in real-world scale. This is for a corporate rollout with thousands of endpoints, and we need something stable before final sign-off, so I’m trying to figure out whether relying on AD-based collection queries actually causes noticeable load on domain controllers compared to using native WQL-based queries within SCCM.