Stores
Install apps only from Google Play, the App Store or your TV's store.
Passwords
Use a distinct password for each service with two-step sign-in.
Before paying
Check the address bar shows the real service name. An1me links to JustWatch, which links to each official service.