I mean… It would work fine to use ROS for this, and truly, my mikrotik devices are definitely hands-off except updates and few rule adjustments, but this isn’t really any different from a Linux box. You have about as much initial config in a hardened immutable box as this.

The other thing is that mikrotik code isn’t open, which might be an issue for some.

I want to add that I respect this approach, it just seems like about as much work as any other roll-your-own solution.