That has nothing to do with Mikrotik.

Use layer 2 security on the edge and you won't have that problem. EVERY layer 3 Hotspot gateway from EVERY vendor is susceptible to that 'hack'. Dick fingers around at hack because it isn't one, it's simply how TCP/IP networks on Ethernet work.