I use a USG. My cameras are all on their own vlan / subnet so they can't see the rest of my network. I use firewall rules on the USG to drop connections from that vlan to everything else including the internet. Works fine.
With a Unifi USG you still need a managed switch to configure different...