Cant they just allow access to JW.org and nothing else - maybe put a parent filter on or something, Im not an expert but maybe they could do that.
The problem is WT are using content management to serve up a lot of their content - so the various downloadable images, pdfs, files, videos etc as well as fonts and javascript etc are being served from other web domains.
Also, there are legitimate reasons to access other websites at the KH - such as an online storage facility (as suggested by WT to keep schedules etc online and available to publishers 24/7) such as google drive or dropbox etc etc - and again they're likely to using other domains to serve content from
Other legitimate websites would be things like the app store / google store so apps can be downloaded, updated and app content can be downloaded.
I think the wifi password thingy is being over-thought here though -
I think WT is basically wanting to make sure there is some kind of password in place - ie it isn't an open free-for-all access - which is fair enough.
Yes some congregations will be a pain and be totally restrictive, the vast majority will password protect, but the password will effectively be an 'open-secret' amongst the publishers.