I'm sure this will soon be solved using the hack of accessing shared Wi-Fi fabrics that some ISPs now offer (as in, the thing where the router will offer a generic network such as CoxWiFi, and allow random people to pay to use your WiFi; even if you don't have it, maybe your neighbor does)... and even then, new IoT longer-range WiFi services can act as a backstop.
Its already happening with Amazon Sidewalk and LoRa bands.
Some of the larger ISPs are also piping cell phone communications to VOIP at the edge using built-in features in the modems, and these are hopelessly insecure by regulatory action.
Just don't have any visitors in your house either, as they might connect it to their cell phone hot spot to watch one of their Netflix shows or similar when you're not looking.
As much as you think this scenario is paranoia, your visitors will think you not connecting your TV is just as paranoid.
It literally isn't good enough anymore. Smart TVs try to phone home in many ways. Thanks to things like Amazon Sidewalk, they can jump on that network for connectivity without your knowledge if it's available nearby.
Some TVs have modular pcie devices in them. You could probably just take the off but with my guess, it would send the TV into panic mode and not boot-up without the device.
Probably not international in context. Most IR receivers go behind a special semi-transparent plastic. That's also the cheapest place to put an LED. I think there are films you can get to block non IR light. Some tvs also have a connection to add an external ir receiver.
Roku TVs "phone home" a lot. I had one with pihole blocking it's collection, but they still updated my menus to suggest garbage for me. I wasn't willing to let the device go un-patched and still be on my networks, so there was probably still data getting back to them. A computer is easier to secure but still has all the same issues by default. The difference is that a computer isn't designed to spy on you. Netflix in a browser is still going to tell Netflix about your viewing habits, but at least it doesn't tell Roku via screen scraping as well.
Same here. Nvidia shield with FDroid sideloaded and a custom launcher is pretty solid.
No Ads with the custom launcher.
I don't have to be logged into anything I don't want to be, the devices are... not excellent but probably the best you can get right now for the price range.
Media format compatibility is good. Bluetooth connectivity exists for peripherals (incl audio bars and headphones). It has USB ports to take a thumbdrive or other android support peripherals (incl USB audio DACs).
Good support for CEC and the remote has IR support for controlling other hardware (ex - I can make it work with my Epson projector just fine).
I don't really like the toblerone remote form factor - and it should be against the law into include dedicated streaming service buttons (netflix... blegh), plus every now and then I have to reboot the device. But generally speaking... if one died I'd probably buy another as the replacement.