Even though the firewall protects the router from the public interface, you may still want to disable RouterOS products and services. Decide on parameters as revealed within the screenshot, except for the state options and SSID. You might want to also pick a distinct frequency and antenna gain;