How to disable LAN ports on beryl?

My beryl is in a publicly accessible place. It access a hotspot and acts as repeater and router broadcasting my own WiFi and routing via wireguard to my home LAN.

I would like the LAN ports to be disabled so that nobody can plug in and access my home network. How do I do that?

GL GUI → System → Advanced Settings → LuCI → Network → Interfaces → Devices → Unconfigure

Or edit /etc/config/network related to br-lan’s ports.

Same pwd as GL GUI; default username root .