I’ve asked this before and still don’t get what the concern is: What is the attack vector for tvOS? How would you get your malware code to run on it?
The only thing I use mine for is a few streaming apps.
Could YouTube ads be an issue? Surely they don’t allow js in tvOS ads.