No, it's not CEC. The Samsung does have a feature they call Anynet+ but in the settings menu the item for is says Anynet+ (HDMI-CEC). So that's CEC, but I'm guessing some early ur-version of it that can't really talk well to current CEC. It was switched on when I found it, but the manual talks about it as a way to use your Samsung remote to control other devices hooked up to the TV, like stereo receivers or video players and so on, not as a way to control the TV from something else.
Anyway, the TV Off tile doesn't work. With the CEC switched off, it just grinds its gears and says The TV isn't responding. But with the CEC switched on, it fails differently. It says CEC is disabled and needs to be enabled for this to work. Even though it is enabled. So, yeah, some kind of weird early or proprietary variant of CEC that the Roku can't deal with.
But I think I've solved the real problem. I was looking around in the Roku remote settings and found the item for controlling the TV, and it said this remote doesn't support that. It's an old Gaming Remote. So I wondered, huh, would a more recent remote support it? And I do have a voice remote for the main TV upstairs. Brought it down, paired it to the basement Roku, and boom, On/Off, volume, mute, worked like a charm.
So I ordered a new remote, and that will free me from having to grope around the bezel until the Samsung's control buttons come up.
Would still love to know why the home and back buttons can turn the thing on, but that's just curiosity at this point.