"Legal". The law is truly an ass.
Thankfully security researchers exist to fill the gaps that lawmakers haven't gotten to / won't get to: https://blog.includesecurity.com/2026/06/the-smart-tv-in-you...
These are the specific URLs mentioned:
proxyjs.brdtnet.com
proxyjs.luminatinet.com
proxyjs.bright-sdk.com
clientsdk.bright-sdk.com
clientsdk.brdtnet.com
I use these regular expressions to block any connections to the domains or subdomains: /(\.|^)brdtnet\.com$/
/(\.|^)luminatinet\.com$/
/(\.|^)bright-sdk\.com$/
/(\.|^)luminati\.io$/
No idea if this actually prevents proxy functionality altogether, but prevents some phoning home if you're infected.