Yeah that's a really good way to put it. I love their kit, there's so much functionality available at a very reasonable price point. One of my favourite things about them is that it's pretty straightforward to move off the beaten path. As an example, I have routinely used their little wireless routers as a wireless client instead of as an access point. One of the places where I regularly do field operations requires us to have 5 or 6 machines connected together with wired Ethernet but only has wifi available for an Internet connection. I use one of the Mikrotik wAP ac units to connect to the on-prem wifi and act as a DHCP server + gateway for the wired network. It took a couple of minutes to figure out how exactly to reconfigure it to do that but it's been absolutely bulletproof since then.
That being said, I've also locked myself out of them a fair bit because their configuration tool will certainly let you configure the device in a way that will not work at all and will prevent you from accessing the web interface to fix it.
There's a solution for that: Winbox (the native app, nowadays also for Linux and Mac) and the Safe mode feature.
With Safe mode enabled, once the device detects that the connection to Winbox has been lost, it rolls back the configuration back to state, when it was working.
RoMON is a life saver to be able to unbrick a device (remotely if you have another working mikortik device on the same network to proxy through!) if you mess up some config that breaks the normal tcp/ip remote management
> RoMON works by establishing independent MAC layer peer discovery and data forwarding network. RoMON packets are encapsulated with EtherType 0x88bf and dst-MAC 01:80:c2:00:88:bf and its network operates independently from L2 or L3 forwarding configuration.
