Thanks, I was able to restore access, suspected I needed Winbox, just meant using a windows machine 
I’ve rolled back to v6 stable
I will research and test the Wireguard setup on another machine. It’s very tricky to navigate Wireguard plus the breaking changes to my current config when upgrading to V7.
The frustrating aspect of this is, is that I am not upgrading for performance..the performance is just fine via the Hex S - rather to try and solve the IPSEC SA issue once and for all! I will look to troubleshoot this aspect further in another thread though