I have a Hikvision NVR and 4k camera setup. I keep them on a separate subnet and have blocked all access to other subnets and the internet via a Mikrotik router.
In the year or so I have had this setup there hasn't been a single packet from the NVR or cameras in an attempt to access the internet.