When setting up a new Mikrotik hotspot in Powerlynx, ensure that the Fasttrack feature on your Mikrotik is disabled:
As mentioned in the official documentation: FastTracked packets bypass firewall, connection tracking, simple queues, queue tree with parent=global, ip traffic-flow(restriction removed in 6.33), IP accounting, IPSec, hotspot universal client, VRF assignment, so it is up to administrator to make sure FastTrack does not interfere with other configuration;
Mikrotik forum topic on how to disable fast-track - Disable fasttrack - MikroTik