Does it even matter if it’s legal or not? What would you rather do, use the camera or spend your time/money fighting it?
This reads like a typical "we collect telemetry and there's nothing you can do about it" disclaimer, which I personally find quite offensive for such an expensive piece of kit. Just the 30k you paid is more than enough to fund a whole development cycle to add an opt-in dialogue to the camera software.
I don't know if you'll find any equivalent hardware that don't include such policies in their EULA, though.
Not to mention, exfiltrating actual recordings would be crazy amounts of data. Unless you see in your internet traffic that the camera is uploading at several MB/s for hours on end, they're not doing what you claim they're doing.