It is known to have major vulnerabilities https://www.bleepingcomputer.com/news/security/over-80-000-e...
So, Hikvision seems to not be a great answer in 2023 after all (an apparent 100% shift from just several years ago). I wonder about the current status of the ban, and what the rebranders and their distributors are doing; a cursory look at web material still shows Hikvision-derived products AFAICT (though I haven't checked in much depth).
As for management software; a dedicated NVR appliance is most convenient IMO in terms of hands-off just-works, but if one wanted to put more time and resources into it, Blue Iris looked interesting the last time I looked several years ago; again, I wonder how that landscape may have updated since then.
As long as you take a pretty hard stance to wall off the Hikvision stuff from the outside internet, it seems fairly harmless. Obviously this requires setting up your internet to manage that, but that's not impossible.
https://www.hikvision.com/en/support/cybersecurity/security-...
Precondition:
The attacker has access to the device network or the device has direct interface with the internet