Comment by Nextgrid

Shitty non-cloud cameras on their own network segment isolated from the internet, and use a VPN to remote in to view/manage them. This mitigates the firmwares' lack of security and prevents remote hacking (or makes it more difficult) as ideally there should be no way for an outbound connection to be made from this segment.