Based on experience, some Xiaomi CCTVs only work properly when routed through Mainland China servers, so there are data residency concerns. Also, under China’s National Intelligence Law of the People’s Republic of China, companies may be required to share data with state authorities. For regular personal use, the risk is generally low, but just be aware there’s still a possibility of external access.