You could use either, personally I'd use EzVPN cause if you set the three remote 2800's up as EzVPN clients, then the HQ router only needs a EzVPN server config and that can then be used by both the 2800 spokes AND the remote access VPN's.
If you use DMVPN you need a separate config for your 2800 spokes and for the remote access setup.