So don't give it your Xfinity creds? My understanding is that Xfinity doesn't let just anyone connect to that network.
Not your creds. Nothing stops the manufacturer from making a deal to get an account from XFinity and shipping the creds on the TV. Then they can exfiltrate data from anyone who has an Xfinity repeater anywhere in broadcast range.