I Actually Also use a separate smart Router to provide internet access to my Grandchildren and their friends. I didn't need to bridge mode the Rogers Router, What I did was add it as a smart device and on the 2nd Router I plugged it in directly and configured it as a 2nd subnet. So what happens is I have 2 AP showing up (2.4 & 5Ghz XB8) and then another completely different AP (2.4 and 5Ghz) showing for guests. So I allow them to use that and I setup a ton of filtering and time limiting options. So for example when the Grand kids are here they connect to it, but they are limited to 2 hours of constant connection. But they can disconnect and then reconnect after 15 mins. This allows me to log how long they are doing things. Also after 10pm when they are in bed, they cannot stay up all night on social media, they get 1 hour max, if they try to reconnect, they are declined after 10pm to 7am so it works perfect. Also there are rules to prevent going to certain types of sites (18+ and so forth).
What I am saying in a Nutshell is you do not have to disable the XB8 AP if you don't want to, it can work concurrently with the 2nd AP and offer it its own subnet. So you can keep your main WiFi secured for you. The 2nd one for the fam. The logging options I have show where they went and how long, but it doesn't invade their privacy. But you can tell pretty quick if they are doing something they shouldn't but I don't confront them, I just block it from future access and the router allows me to ping them with a message if they go back "Sorry this content has been filtered" for example and to speak to me about it. That way it allows them to open a dialogue with me.
Hope this helps
