I have several Reolink cams around the place, including a doorbell. They are on a VLAN called SEWER. I also have a VLAN called THINGS, which is for general IoT and SEWER is for those devices that scare me the most!
SEWER and THINGS don't get to see the internet at all, except via Squid. DNS A records with ntp in them resolve to the IPs of my equipment.
It is a bit crap that you need to be a networking and IT consultant to make this stuff mostly safe. If you can't, then getting the claw hammer out seems to be indicated.
HomeKit Secure Video devices. Block the device's internet access at your router. Apple can't see the video, it doesn't go to Amazon or Flock, nothing counts against your iCloud storage.
Easy Button option for us lazy folks.