This is fairly trivial for packet nerds using bro/zeek, pihole and iptables.

Zeek (or wireshark) can revel what domains and ip addresses are being accessed. Pihole and iptables can block those addresses. Pihole needs to be the only DNS allowed and iptables needs to be running in between the TV and its path to the internet.