Or do but get a Pihole and lock that TV down.

You may also need a firewall rule that redirects any port 53 traffic that wasn’t from the Pihole, back to the Pihole. There is some sneaky stuff that happen and while I’ve only seen a Google Chromecast do it, I assume they all do.