Eh, no it's not? Ubiquiti's camera solution for example works by negotiating a direct connection between the actual local NVR and the connecting phone app. This is more than easily possible to do securely.