I wouldn't remove the network card. That also kills the Bluetooth remote.
Unplugging it from ethernet/wifi may also not be enough. If it's connected via HDMI-HEC, it could get Ethernet over HDMI. LG doesn't specifically list HEC support, but at this point, I'm not sure they can be trusted.
Safest path is to block its IP addresses at router level, unplug it from ethernet, factory reset it, only go through a trusted streaming device without HEC support, block all the LG servers at router level, and power the TV down when not in use.
What a stupid way to lose trust.