A Pi-hole is the only real solution for this as far as I can tell if you still want to use apps on your TV like Netflix. I use a Pi-hole as well with several block list sources, my favorite being Steven Black's hosts: https://github.com/StevenBlack/hosts
A simple workaround for nefarious vendors is to ignore your DHCP-provided resolver address and just punch through to their own resolver. Maybe over SSL is they're really sneaky.
You need to firewall addresses ( tricky ), or connect to a LAN-only Wifi, or don't connect at all.