It’s not “CCTV” if it’s connected to a phone app, your ISP network, or accessible on the World Wide Web. CCTV is closed-circuit for a reason: isolated, locally recorded, and not exposed to the internet by default. The moment you add remote app access, cloud relay, port forwarding, or a vendor P2P connection, you’re in IP video / network video / cloud video territory. If you want real security, stop calling everything CCTV and start asking the right questions: \t•\tIs it segmented on its own VLAN

How To Disable Remote Desktop on Windows 10 [Guide]