oh, I didn’t realize that about webservers. I don’t know much about them, never done web dev. So like a wordpress container would do the trick?

Good point about DNS filter. As for LAN vs WAN, It seems easier to secure your own lan? I don’t want the TV acting as a bot net or reporting stuff to some server. So it seems like securing it to only access certain domains would be useful.