An example of what I believe to be secure:
I have NVR on my network. I can access any of my cameras at NVR or via a web browser that support napi and also via iPad/iPhone using iVMS-4500. I have never signed up with hik-online.com, I don't port forward at my firewall, I have disabled upnp...