Before doing anything about the internet connection of the LAN devices, you need to implement a firewall ASAP! The default one is the bare minimum.
After you urgently do that, you can remove the WAN port from the bridge, add it to the WAN interface list and check whether “Add default route” is enabled for the DHCP client