Is it right, that the ip adress of my camera is send to you?
Is it right, that the password that is necessary to login is send to you?
Anybody that knows my user/password combination can watch my videostream without knowing my ip adress or port?
Is ist right, that at least YOU (and your employees) can easily watch ALL videostreams?
What are you doing to protect the username/password combinations on your server ?
do you run any bruteforce protection on your server ?