Both theories would be easily testable. The danger is also much smaller if it's not on your Wi-Fi regardless.

Not really. There’s zero reason that a manufacturer wouldn’t just program it to wait several months before attempting to connect to open networks.