When setting up a new Mikrotik hotspot in Powerlynx, ensure that the Fasttrack feature on your Mikrotik is disabled:
As mentioned in the official documentation: FastTracked packets bypass firewall, connection tracking, simple queues, queue tree with parent=global, ip traffic-flow(restriction removed in 6.33), IP accounting, IPSec, hotspot universal client, VRF assignment, so it is up to administrator to make sure FastTrack does not interfere with other configuration;
Manual how to disable it - How to remove / disable Fasttrack - TKSJA