A stateful firewall would allow your RPI to access the camera vlan/subnet while still blocking any outgoing connections from the cameras. I use a Debian Linux

A stateful firewall would allow your RPI to access the camera vlan/subnet while still blocking any outgoing connections from the cameras. I use a Debian Linux router with nftables to achieve this in my homelab.