If you use managed switch, you do not need a 2nd router.
You cannot put Brume in bridge as your said. It will not work for Wireguard and Adguard.