The container fully supports iptables and nftables internally.
There are many vpn services that require iptables and nftables to work correctly.
RouterOS lacks kernel modules xt_TPROXY, nft_tproxy, nft_socket.
Hopefully, v7 will be implemented in a later release.