I switched to Mikrotik from Unifi. With Unifi, I was always fighting it, with "most users do not need that, why you do?" (like site-to-site ipsec tunnel with the other side having valid dns hostname, but not fixed ip). With Mikrotik, I just set up the way I need it and it's done.
Agreed; Ubiquiti/unifi is easier to get started with. But as soon as you want to do anything more 'complex', it often can't do it or won't let YOU do it. Mikrotik is at better at not getting in your way. Though, Mikrotik setup is more involved and requires a bit more knowledge about networking than Unifi does. Only thing I really don't like about Mikrotik is the CAPSMAN/AP situation. They're pretty bad and very difficult in my experience, to get working right/seamlessly.
Agreed about the firewall side of things! I was complaining about the switch & VLAN side of things - I find myself pretty proficient in general Linux networking tools but couldn’t figure out their switching/bridging/VLAN configuration despite easily being able to do it on a Linux command line with brctl/etc. I suspect it’s a necessary evil though as Mikrotik’s custom config system for this may not actually use Linux networking subsystems and interacts directly with the hardware to enable hardware offload.
