We're worried about it connecting to a neighbor's unsecured network or some sort of unpublished mesh capability for exfiltrating your data and downloading ads.

Setup an unprotected network that is isolated and you fully control, see if it connects at all.