How’s that access control handled? Very easy to spoof the MAC of the TV or setup some SNI spoofing proxy server, NGFWs with TLS Active Probing are probably harder to deal with but do hotels really have that?
Actually only the first screenshot is a review of my application, I asked some friends for their credentials to test the information disclosure out. (you would only get 1 review per application)