Clear and understood! I've dabbled in infosec enough to fool myself into thinking that I understand the risks and mechanisms. I want to set it up so that if someone wants to pop my camera IP network, they can at least take the trouble to come to my house physically. (Unless they've got the cool-kid toys, and those people can already see anything I do anytime anyway.)
Thanks for the pointer to blue iris, I'll check them out... (ETA: BlueIris looks cool, but I'm not willing to bring Windows into the house just for this. I don't need anything pretty, just functional. I'll keep looking!)