It’s unlikely you’re going to be targeted by someone who can do this, so as long as your cameras aren’t directly connected to the internet and your router at least has a password I wouldn’t worry too much.

For the Kasa/Tapo line it seems to be. I was talking with a security camera guy about them, he recognized several but from a different brand. Not all of the line are like that. The ones he recognized predated their release by tplink which is why I think they rebranded.

Part of the problem here is I’m pretty certain they don’t develop their own hardware or the firmware for it, they rebrand a different OEM and sometimes give it a different plastic shell.

Google does what to index things again?

Can you believe they only had one left?