SUGGESTION: selectable tunnel type "GRE over IPsec" and "IPsec over GRE"

Hello,

Currently, if you set Interfaces - GRE Tunnel - IPsec Secret, you get “GRE over IPsec” tunnel (IPsec outside, GRE inside).
But, sometimes, we need “IPsec over GRE” tunnel (GRE outside, IPsec inside).

My suggestion:
add dropdown menu for select tunnel type:

  1. “GRE over IPsec”
  2. “IPsec over GRE”

Out of curiosity, this IPsec over GRE, what is it good for?

I understand the “standard” GRE over IPsec, it’s nice “less headaches” replacement for IPSec’s tunnel mode. I guess that many people use it, so MikroTik added this handy shortcut for it, so they you don’t have to configure IPSec part manually.

But IPsec over GRE? Sure, anything can go over GRE, so why not IPSec. But I fail to see any benefits of doing it like this. Why not use just IPSec without GRE?