Probably better to put in a separate restricted vlan. Who knows, maybe one day some piece of firmware code will kick in to start rotating MACs to lie who the device is to get a connection.

Why is it on the network at all if it’s blocked?

Streaming content on the LAN.

They’re not but they were in the past so who knows if they kept the password.

Out of curiosity, do you simply not use streaming services, or do you get them on the TV some other way?

I plug a mini PC into my TVs and use them that way. Works out better because the TV apps run way slower than even the cheapest mini PCs.

TV here - have 4 of them now, one for each TV, one for the portable projector, and one for music in the workshop.

Fabulous boxes - I’m still running a 4 generation old one and they just work.

Apple TV.