I was worrying about typical Chinese cloud you cannot turn off (seems to be present on all cheap IP cameras), but this device is actually pretty good.
For remote access, there is no cloud. But you can BYO tailscale or FRP [0] (note: I really like the FRP idea, as it's trivial to self-host)
For updating, there is a central server. But at least the process seems to be manually-initiated [1].
I am not saying the firmware is backdoor-free, but at least it would be feasible to monitor/block all outgoing network connection attempts, and still have a functional device.
[0] https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/network/tail...
[1] https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/system/updat...