Ironically enough as it is to believe, the Walmart branded ONN ones are pretty mundane. Spend a little for the more premium model that they sell. It doesn't block you from doing basically anything and they're very vanilla. I don't know if there's any background spying going on from Walmart or not but the OS itself doesn't seem touched, but you can lock it to a VLAN if you want. I consider my entire default routed network hostile and selectively run my PCs on a separate private dns and network. I find it's easier to jail myself than jail the malware every time I buy something new.