I purposefully didn't give my Sony tv (android) my wifi password. A few weeks later it prompted me to install a firmware update, and I saw it was connected to my home wifi. How? Best I can guess is another android device shared credentials with the TV.
I blocked that stupid thing at the router. I don't need firmware updates for my TV.