Secure but low-cost alternative to ASA5512. Has anyone used Mikrotik kit for VPNs?

My company has several small branch offices too small for dedicated circuits. For these I use a pair of (usually) ASA5512-Xs to run IPSEC tunnels to vpn concentrators in my datacentres, then I have a local switch doing BGP and handling the routing to retain connectivity if one of the tunnels goes offline.

With the 5512s going end of life I’m thinking about finding a lower cost replacement. Most of these sites don’t have dedicated server space, so these things end up in cupboards or on shelves. Something physically smaller than the ASA would be useful.

Has anyone got any experience of using Mikrotik kit in the enterprise? A pair of their hEX routers could replace the ASAs for about 1/20th the price, and they’re physically tiny. I’m not worried about performance, most of these sites only have 5-10 users, but are they reliable, and how seriously do they take security? I can’t find much online about people using them, except for a few hotel installations.

Thanks in advance.

Sarah