[ck2]

You never know when a zero-day is going to popup and whack your cameras as IOT, part of a DDOS or whatnot

But if you've hardened it even a little bit with something as easy as not letting it communicate off your intranet, well that can prevent ugly discoveries later

If you need offsite remote camera access you can always carve out a tunnel