Going to have a play. Thoughts are it's an old card (in a PC) that doesn't support wpa2-psk (!) or the 2G AX mode?/interface wifi security
add authentication-types=wpa2-psk,wpa3-psk disabled=no name=middle-earth passphrase=****
add authentication-types=wpa2-psk,wpa3-psk disabled=no name=shire passphrase=****
/interface wifi
set [ find default-name=wifi2 ] channel.skip-dfs-channels=10min-cac configuration.country="United Kingdom" .mode=ap .ssid="Middle Earth" disabled=no name=private-2g security=middle-earth
set [ find default-name=wifi1 ] channel.band=5ghz-ax .frequency=5500,5660,5260,5580,5180 .skip-dfs-channels=disabled configuration.country="United Kingdom" .mode=ap .ssid="Middle Earth 5G" disabled=no name=private-5g security=middle-earth
add configuration.mode=ap .ssid="The Shire" datapath.vlan-id=10 disabled=no mac-address=4A:A9:8A:64:E9:B9 master-interface=private-2g name=guest-2g security=shire
add configuration.mode=ap .ssid="The Shire" datapath.vlan-id=10 disabled=no mac-address=4A:A9:8A:64:E9:B8 master-interface=private-5g name=guest-5g security=shire
PS. Intrigued that there isn't a channel.band=2ghz-ax in there. Added it and no difference. I did a factory reset earlier to see if that worked (it didn't) and the default script had the channel-band in it. Not the first time I've come across quirks like that. Guess ROS v7 is rapidly changing.
PPS. Stuck a USB RTL8188ETC that I had lying around - no problem there.