I’m sure it can collect voice recordings and sell them if you hold the voice assistant button on the remote while the TV is off, but on almost every voice remote the connection drops after a few minutes to save batteries (and you need to press a button on the remote to wake it up again). This is how it works for my Xiaomi, Chromecast and Samsung TV remotes at least. So I think you need to press the button on the remote first before it can create a recording.
And the part about scanning the LAN is yet another reason to enable client isolation and block LAN connections fully.
