Yeah I'm not sure what the correct headline is, but at least for me I definitely clicked because I thought it was to do with Android TV, which it wasn't. It was about those cheap boxes that anyone reading Ars already knows are probably filled with malware

Those boxes are in a skin for normal Android to make it work with the TV. The only device you likely come in contact with with Android TV is the new Chromecast or a Sony TV. Other than the Nvidia shield and the Chromecast most actual Android TV devices still come with malware from the manufacturer. Even the Sony TVs, but basically every Smart TV comes with malware to spy on what you're doing too.

I think the new dish network's at top box also runs Android TV, maybe you found one of those wild.

That's the problem, they're not running Android TV at all. Just regular phone Android with some third party launcher.