I think one of the traps we fall into is imagining that an attacker is somehow intelligent (someone who can immediately attack video storage) but simultaneously uncreative (doesn’t think of some way to make the surveillance footage irrelevant).
I’ve decided that I’m not a high-profile target for covert operatives, but I am a target of opportunity for people who have access to my data once that data is outside of my control. The decisions I make based on that are decisions like, “No surveillance feed goes into cloud services operated by companies I don’t trust,” but “I don’t need to encrypt my NAS”.
