Now that you've set that up, nobody can connect.
No, they can connect. You don't need (can't have) a VPN tunnel to connect. Once connected (open access point), however, the router won't route anything past itself until the client creates the VPN tunnel.
Old programmers never die, they just branch to a new address.