99.9% of normies have a router NATing all their traffic

It takes active effort to expose a camera publicly

Unless that camera uses UPnP and has no auth configured by default.