Every TV ships with a non-unique secret key and an agreement with some major internet service provider which specifies that accounts using that key will gain network access but only to a specific list of IP addresses that host or proxy firmware updates and advertising content.

[edit - to be clear, I'm not saying that this is what Samsung is doing, I'm just describing a plausible way how this might get done]