You lack imagination, which is a liability in this field.

Not your creds. Nothing stops the manufacturer from making a deal to get an account from XFinity and shipping the creds on the TV. Then they can exfiltrate data from anyone who has an Xfinity repeater anywhere in broadcast range.