Not an expert, have a single peer in Wireguard, the only way in my case was to use action=accept, this was not working:
/ip firewall raw add action=notrack chain=prerouting in-interface-list=VPN
...
/ip firewall filter add action=accept chain=input connection-state=established,related,untracked
plus the comment from sindy suggest to not use notrack