Thank you all, here is my current config:
[admin@MikroTik_Audience] > export compact hide-sensitive
# jun/03/2020 10:47:48 by RouterOS 6.46.6
# software id = M0L0-MR8G
#
# model = RBD25G-5HPacQD2HPnD
# serial number = B6BE:xx:xx:xx
/interface bridge
add arp=reply-only name=bridge-guest
add name=bridge-main
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=3 band=2ghz-b/g/n channel-width=20/40mhz-XX country="new zealand" default-authentication=no disabled=no frequency=2447 mode=ap-bridge name=wlan1-main ssid=wifi
set [ find default-name=wlan2 ] antenna-gain=0 band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX country="new zealand" mode=ap-bridge name=wlan2-main ssid=wifi
set [ find default-name=wlan3 ] antenna-gain=0 band=5ghz-a/n/ac channel-width=20/40/80mhz-XXXX country="new zealand" disabled=no mode=ap-bridge name=wlan3-main ssid=wifi
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" management-protection=allowed mode=dynamic-keys name=default-guest supplicant-identity=""
/interface wireless
add disabled=no keepalive-frames=disabled mac-address=76:4D:28::xx:xx:xx master-interface=wlan1-main multicast-buffering=disabled name=wlan1-guest security-profile=default-guest ssid=wifi_guest wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add keepalive-frames=disabled mac-address=76:4D:28:xx:xx:xx master-interface=wlan2-main multicast-buffering=disabled name=wlan2-guest security-profile=default-guest ssid=wifi_guest wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
add disabled=no keepalive-frames=disabled mac-address=76:4D:28:xx:xx:xx master-interface=wlan3-main multicast-buffering=disabled name=wlan3-guest security-profile=default-guest ssid=wifi_guest wds-cost-range=0 wds-default-cost=0 wps-mode=disabled
/ip pool
add name=dhcp_guest ranges=10.0.1.2-10.0.1.254
/ip dhcp-server
add add-arp=yes address-pool=dhcp_guest disabled=no interface=bridge-guest lease-time=23h59m59s name=dhcp1
/queue simple
add max-limit=10M/10M name=wifi_guest_limit target=bridge-guest
/interface bridge port
add bridge=bridge-main interface=wlan1-main
add bridge=bridge-main interface=wlan2-main
add bridge=bridge-main interface=wlan3-main
add bridge=bridge-main interface=ether1
add bridge=bridge-main interface=ether2
add bridge=bridge-guest interface=wlan1-guest
add bridge=bridge-guest interface=wlan2-guest
add bridge=bridge-guest interface=wlan3-guest
/interface wireless access-list
add comment=mtik_hap_ac2_2.4GHz interface=wlan1-main mac-address=C4:AD:34:xx:xx:xx vlan-mode=no-tag
add comment=LIFX interface=wlan1-main mac-address=D0:73:D5::xx:xx:xx vlan-mode=no-tag
add comment=LIFX interface=wlan1-main mac-address=D0:73:D5::xx:xx:xx vlan-mode=no-tag
add comment=Kettle interface=wlan1-main mac-address=BC:DD:C2::xx:xx:xx vlan-mode=no-tag
add comment=CCTV interface=wlan1-main mac-address=50:EC:50::xx:xx:xx vlan-mode=no-tag
add comment=Printer interface=wlan1-main mac-address=C0:B5:D7::xx:xx:xx vlan-mode=no-tag
add comment="Google Home Mini" interface=wlan1-main mac-address=44:07:0B::xx:xx:xx vlan-mode=no-tag
/ip address
add address=10.0.1.1/24 interface=bridge-guest network=10.0.1.0
/ip dhcp-client
add disabled=no interface=bridge-main
/ip dhcp-server network
add address=10.0.1.0/24 dns-server=1.1.1.1,1.0.0.1 gateway=10.0.1.1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=bridge-main src-address=10.0.1.0/24
/ip route rule
add action=unreachable dst-address=10.0.1.0/24 src-address=10.0.0.0/24
add action=unreachable dst-address=10.0.0.0/24 src-address=10.0.1.0/24
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=10.0.0.0/24
set ssh address=10.0.0.0/24
set api disabled=yes
set winbox address=10.0.0.0/24
set api-ssl disabled=yes
/system clock
set time-zone-name=Pacific/Auckland
/system identity
set name=MikroTik_Audience
[admin@MikroTik_Audience] >
https://ibb.co/MRF8S2d
* Tested with the different AC band 867 Mbit/s - no difference