Please enable ACS (and DFS) under bridging mode.  Some end user wants to provide his/her own firewall to front the Eero mesh. This will allow a more robust firewall/router such as pfsense to front the Eero mesh, providing a more manageable firewall and routing functions.