how to hide Mikrotik from ISP

Yes, “drop all” at the end of the firewall input chain (prevent any service to be discovered from ISP/Internet)
and change MAC address of interface where ISP is connected.