This is sort of a solvable problem is the thing. If you just check there's no open networks in/near your home, and do a factory reset when you sell it, you're covering both of the hypotheticals you mentioned.

If the TV can't talk to anyone, it can't talk to anyone. It's too expensive to insert complements into millions of units for edge cases when so many people connect their TVs anyway.