Generic notes:
See point #21 here:
GP & CSA for Mikrotik devices
Besides, one of the most confusing things in Mikrotik wifi settings is that the SAME setting can be configured BOTH in /interface wifi security and in /interface wifi, even if settings like "security.authentication-types=wpa2-psk,wpa3-psk"
have actually the same values in both, it is good practice to only make them in one place.