Go the other way. Get the one you want, but all content comes from an external media player, the TV never gets directly connected to a network.
I use a nvidia shield but an apple TV can be locked down as well. Stay away from roku and cheap Chinese boxes. More info
My approach is to muddle the waters as much as possible, using different providers and throwing in a pi hole to the network to block DNS requests.