Just a couple notes:
Typically in a cluster you would have insight enabled on the publisher or in a large cluster you could have just a dedicated insight.
Insight can be processor intensive when reports are ran and It can also increase you data replication between the nodes.
Even if a device is being authenticate on a subscriber the transaction data is still being sent to the publisher so unless you want a full active/active cluster you would only enable insight on the publisher.