Now that you've set that up, nobody can connect.
No, they can connect. You don't need (can't have) a VPN tunnel to connect. Once connected (open access point), however, the router won't route anything past itself until the client creates the VPN tunnel.
The following statement is not true. The previous statement is true.