Limit connectivity
The easiest way to improve security manyfold (despite how lax the user is) is to have a physical button on or near the camera which must be operated before any new device can be authorised to connect to the camera. Give a 15 second or so window to press the button following a connection request from any new device, otherwise the request is cancelled. Maybe add the feature that too many failed attempts causes the camera view to turn red as a warning to the legitimate user.
Biting the hand that feeds IT
