[Mister_Snuggles]

The security on most IoT products is terribly lacking. I don't blame you for being wary of them.

I have a bunch of cheap WiFi cameras, but they don't require a cloud service to operate so I can segregate them all onto a WLAN/VLAN that doesn't have access to the internet. This is a reasonable measure to secure these devices, but for cloud-required cameras (like the Blink appears to be) this isn't an option at all.

Of course, by taking the vendor's cloud service out of the equation I either have greatly reduced functionality or I have to spend time (and money) to build out that functionality locally. The route I've gone has Zoneminder doing motion detection, recording, and storage, with an IPSec VPN to provide remote access.

It's not perfectly secure (nothing is), but it's a lot better than the default.