I have configured this for family and have had no complaints so far, and can walk them through disabling it if it ever gets to it.

Steps are pretty simple:

- build and dump image on a 7$ raspberry pi pico, put that on the network.

- Configure TV DNS server to point to the pico.

- Configure router to block DNS traffic entirely from TV.

- Test

If it works, then it should work a long time. TV won't get any updates, netflix doesn't seem to cycle or add new domains.