Hate to break it to you, but AppleTV really is the best option.

I haven’t tried it, but I would think that running something shitty like a Roku but gating it with a pi-hole would be reasonable. You just have to make sure that there’s no open networks within reach (neighbors, etc).