Hypothetically because I’d be using it as a monitor part time and using the built in shit the other part of the time? In actuality I do as you suggest and don’t ever connect the thing to the internet. Operation Weeping Angel was enough to convince me of that.
https://krebsonsecurity.com/tag/weeping-angel/