fix(media_player): privacy bare-app identity outranks the channel-title fallback in the foreground tier (F3)

custom_components/nvidia_shield/media_player.py

@@ -652,14 +652,16 @@ class NvidiaShieldMediaPlayer(MediaPlayerEntity):
             state = "playing" if info.playing else "paused"
             # Privacy mode: identity stays the app, never the media title
             title = None if not self._adb_store_info else info.title
+        if title is None and not self._adb_store_info:
+            # F3: privacy mode first — identity stays the app, so neither the
+            # channel number nor the media title can leak as the identity.
+            title = self.app_name or self.app_id or foreground
         if title is None and self._last_channel and (
             # F1: the channel number belongs to the channel app only — never
             # leak it to the launcher or another foreground app.
             foreground == TIVIMATE_PACKAGE or foreground in manager.audio_playback
         ):
             title = self._last_channel
-        if title is None and not self._adb_store_info:
-            title = self.app_name or self.app_id or foreground
         if title is None and foreground in manager.audio_playback:
             # E hint (zero round-trip cost): audio was recently played
             title = "Media recently active"