It should mostly work with HDMI CEC. My Android TV (Nvidia Shield) will turn my TV on and off. I only use the LG remote to adjust the volume although if you're using an AVR, it should do everything.

you can let it on the network, just block it from leaving the network. Lets you have the remote control features but without the risk.

Better hope that no guest connects the TV to their phone hotspot to watch their Netflix like one user in a previous post reported happened to them.

I recommend turn off tv via home automation involving smart plug thingy, and tv set to turn on on each power cycle return