In the short-term is a password change sufficient?
I seem to remember that a firmware upgrade was not a 5min job, especially as I think the camera is a Chinese variant.
I have asus ac66u, so VPN via router I guess is best option then, but I need a subscription, yeah?