You probably only have a few services that you genuinely want the TV to reach. If I had a "smart" TV, I think I'd go with a whitelisting approach instead.
I ran allow list at home for a while with a transparent squid proxy. It worked well for me, I could add stuff to the squid Conf and reload easily but not practical for the other three people ink my home. Amazing all the endpoints failing with no visible impact on anything I wanted to use.