I mean, that's a bit complicated, and they can always change the domains. I just block the whole-ass TV from WAN. I can still interface with it for smart home stuff on LAN, but it can't update or access anything outside my network. And since it has an IP on the LAN, it doesn't bitch and moan about not having network.