what I recommend is not supporting routerOS directly. There's a lot of non starters for it that make it difficult to develop for (eg why ZeroTier has no routerOS support). You can however target something like OpenWRT because routerOS can run meta routers (some weird Mikrotik Virtualization concoction). If you want you can also seperate your data and control plane and use something like https://github.com/aymanalqadhi/tikpp
to add routes based on meaningful level of authentication that has nothing to do with routerOS like a LXC instance running behind their firewall.