Anyone who owns an LG smart TV must inform all guests and family members that they are being monitored – this is required by LG’s current terms of use. Meanwhile, LG monitors install potential malware and surveillance software on a connected Windows computer.
And thus vulnerabilities are introduced. Either by not updating the FW, or by updating the FW.
The odds of someone attacking my tv via the internet are as close to zero that “never gonna happen” is just about right. If it did happen, it would be because they went via the server maintainer for the firmware to attack all the TVs, and if they did that then an updated firmware would just as likely be a culprit.