This is what I do. It stops it from auto updating and from phoning home, but still lets the individual apps function. Some of the apps don't work, because they can't update either, but if we get desperate, we just punch the TV through the pihole just long enough to update the individual app. It's a reasonable middle ground.