

I second the wired camera recommendation, at least for a few critical cameras.
WiFi cameras are vulnerable to a de-auth attack. It’s fairly trivial now to make a device that will kick all WiFi devices off of a particular network. It’s not so bad if they record internally and are inaccessible. If they can be reached, once someone is inside, or if they don’t record, they can be bypassed completely, or stolen.
This does all depend on the level of protection required. Basically, are you worth the effort of targeting, or is it just to dissuade opportunistic attempts.












Half a course would be better than nothing. A full course would be best, but half is a LOT better than none.
The general way to make lasting changes stick is to support moves in the correct direction. Improvements are generally 1000 tiny steps, rather than 1 big leap.