This has not been my experience. I always turn on Play Protect but almost never recieve warnings about APKs. I install plenty of apps outside of the Play Store, even some sketchy ones. The only one that ever gave me a Play Protect warning is Lucky Patcher.
I wouldn’t buy one just for media. Even premium media players like NVIDIA SHIELD TV or Apple TV cost less than Xbox Series S.