I'm surprised this is required. Agreed that's shady. I wonder what their reasoning is.

But if you don't trust it, the fix is easy: just deny the Ubiquiti cameras and controller all internet access. That way no trust is required.

But what if I want to access my cameras remotely but not have their manufacturer access them?