VLANed home network, 2nd try

Since you have a non-critical device to work with (the hap ac2), why don't you use it for learning and playing?

As long as you don't follow @anav's advice to remove all use of vlan 1 and removing an ip address from the bridge itself, switching between vlan-filtering=no and vlan-filtering=yes will have little effect, other than no longer forwarding tagged frames for non-configured vlans. See this thread: Once and for all COMPLETE Offbridge Port setup, specifically Once and for all COMPLETE Offbridge Port setup - #14 by CGGXANNX and Once and for all COMPLETE Offbridge Port setup - #31 by Amm0