- 1430.3 Mbps for 25 ip filter rules in a 70€ Wi-Fi 7 router doesn't sound that bad to me. Also, as sibling comment says, you can enable fast tracking for certain connections.

- Mikrotik doesn't have open ports to the outside since years and years ago, IIRC. They had a CVE on their administration port (not in ssh) in 2023, but you shouldn't open that port to the outside anyway.

- All Mikrotik wireless routers include at least a level 4 license. You only need a higher license level if you need more than 200 VPN tunnels or more than 200 users in the hotspot functionality. A bigger wireless router like the hAP ax³ will already have a level 6 license, the biggest one. You might need a license if you set up a Mikrotik instance in a X86 server, or virtualized, for example to manage a bigger site or as a bigger hotspot controller. Licenses aren't expensive and are paid only once, no subscriptions (by device, I think you get a device ID or something like that).

- All the Mikrotik routers that I own still get updates. The RB750GL, that was released like 15 years ago or more, still updated.