You never know when a zero-day is going to popup and whack your cameras as IOT, part of a DDOS or whatnot But if you've hardened it even a little bit with some

You never know when a zero-day is going to popup and whack your cameras as IOT, part of a DDOS or whatnot But if you've hardened it even a little bit with something as easy as not letting it communicate off your intranet, well that can prevent ugly discoveries later If you need offsite remote camera access you can always carve out a tunnel