Even with the no-cloud-connection on a static ip address, I would run Wireshark and power cycle the cameras... and I would still see the outbound internet connections from the cameras to APNIC addresses. After blocking, some cameras would fail that outbound connection and power cycle because it was embedded in the boot process as a requirement. So, i checked the responses they were looking for, and found that it had nothing to do with any firmware updates or video feed configuration.
My internet of things paranoia peaked before I ever started working in cybersecurity, and then it only got worse once I had access to the FBI news feeds.
joe