Second, never use the "apps" built into the TV.
Next, don't plug Ethernet into the TV. Plug HDMI cables into the TV.
Use a box of your choice on the other end of the HDMI cables. This is now the box that you trust. (Roku? Shield? Blu-ray? MacBook? PC? Linux? Playstation? XBox? Whatever you want.)
The Smart TV itself is now fine. Choose the devices you plug into it to play content. The TV just shows it.
We have to use the actual TV remote to debug some audio issues or disable the motion blur stuff again every once in awhile, but otherwise it might as well just be a display for the AppleTV. I’ve only seen the actual home screen of the TV a handful of times.
I guess it’s probably still spying on us somehow, and it seems like different models make using the AppleTV remote and booting right into the AppleTV harder than others, so your mileage may vary.
This. Never trust software switches. See my other reply for what I suggest instead of "streaming boxes" that aren't any better than the TV firmware.
Can you explain why you can't just not give the TV your Wi-Fi password?
Or are we worried about the case when the TV did have Wi-Fi (due to it being mandatory for some initial setup, say), but we don't trust that "Forget Network" and "Wi-Fi off" are actually honored?
Suppose the device surreptitiously reconnects to Wi-Fi in spite of being told to forget it. You may be able to block it in your router and failing that, change the access point password.
No?
I assume at some point, appliance manufacturers will start "partnering" with things that actually need WiFi for exfiltration purposes. Phones would be a good place to start.
That way, we'd need to either Faraday cage our friends' phones, not invite them over, or send marketing pervs video feed of our moldy pickles.
https://en.wikipedia.org/wiki/HDMI#HEC
Any chance the TV can phone home via that? One would have to make sure the HDMI cable physically doesn't have the Ethernet pairs, or set the trusted box to filter the traffic.
Other than that, I agree regarding TV, with one caveat: you might want to update the firmware right away, or at some point. The device might need to phone home for that. In order to achieve that, you can put up a temp WLAN AP with your smartphone.
With regards to my STB: I am considering cancelling all my subscription services and simply downloading everything to my NAS. This already runs Jellyfin. Then all I need is a Jellyfin client and HDMI. Perhaps a RPi 4 or RPi 5 would be suffice there.
Why?
Sure, I would be disturbed that it's doing that sort of thing in spite of Wi-Fi being explicitly turned off.
What is the threat to me though?
Also, how do you pay for streaming channels, etc., if you don't give it any information?
If the devices still scan all the time...
Living on the countryside there is no such problem.
If they choose a Firestick or Roku what's the difference? XD