I think this is why maybe?
You may find yourself up against a limitation of EE's mobile network. The EE mobile network uses Carrier Grade NAT (CGNAT) resulting in a double NAT, which means that you don't get your own public IP address but share it with other users. So you can't be uniquely id'ed on the Net & therefore your LAN cannot be addressed from outside for unsolicited accesses. This is unlike fixed BB.
But another thread on the EE forum...
Then bang more bad news. EE had a funny NAT type that blocks me from connecting to most multiplayer games. Darn. And a few more hours of troubleshooting I find a way to make sure I'm on ipv4 not 6. And some other tinkering. Boom NAT type 2. PS4 cod? Works. Pc apex legends, world of tanks, and various steam games ? Check. All suddenly work. Great speeds. Only 20 to 40ms ping. Perfect. Couldn't be happier.
The diagram is simple. WWW>HG612>ROUTER
>Zyxel>
I have made the assumption the HG612 is in bridge but I can remove it tomorrow and check. (somehow)