I see a lot of camera system and they're either using RSTP over RTP or just RTP. Most of the times they are on straight HTTP for the login, some will be on HTTPS, but unless forced (which I have seen), the video feeds do not tunnel through the HTTPS. Should they be forced through HTTPS or implement SRTP or RSTPS?
Authentication/Login should always be done over HTTPS if its an viable option, consider just the amount of admins that uses the same passwords for different systems. There are so many reasons.
RTP is from 1989 originally, and to run anything over it today should almost be criminal. If it have any form of security perspective, a bad guy could DOS the camera feed or send a faked time-loop (like they do in the movies, yes we actually did that in our office for a demonstration).
I'd use one of those two, and make sure to enable both authentication and encryption (both optional).