I'll admit I use reolink, however isolated on vlans with zero connectivity allowed other than caddy's L4 module encrypting and encapsulating it's stream which then is restricted to only my frigate setup.

Even if I had a higher level of trust on the hardware and firmware, principle of least privilege.