Difference between DSA and driver-level VLANs in the context of RPi4 (no switch)?

I think your current setup will work, I just don't find it as a proper solution. Either do VLAN filtering for eth0 on the bridge interface or do it as subinterfaces of eth0.