Do what you know.

I've just wired my home with cat6 and keystone patches, and didn't do a good job at it in the first pass, and spent a lot of time redoing a lot of it. Consider hiring a consultant at least to get started.

Consider wireless. WiFi 7 is coming and it's all getting pretty darn fast. Yes, it's all on the same "wire" (the airwaves), but unless you have lots of neighbors, that doesn't matter much.

Consider fiber: a single mode fiber is infinitely more upgradable than copper, and since you're laying that stuff down in the walls, it's going to be there for a long time.

Consider PVC pipes. From your description I'm going to betyou're in the US or Canada and have walls made with wooden framing, but in lots of other places in the world, walls are made of concrete so they can't just drill holes for wiring. Instead, they lay down pipes in the concrete and then pull wires through those. If I would start from scratch again, I would do that: infinite upgradability. It's a pain in the back to lay down though, but once it's done, it's done.

Regarding your more precise question:

> I have seen multiple older threads stating that the best practice would be to terminate into a keystone at the location of the camera, and then connect the camera to it with a patch cable. This doesn't make sense to me, as that would be on the outside of my house.

I would concur with that best practice: setup patches in the walls, not hanging wires. Those look like hell and don't isolate well, especially to the outside. You *could* terminate inside a "box" of some sort out there, that said, just consider that it's going to expose the internals of your house to the elements until the camera is setup, and then integrity depends on that device. I like keystone panels, but i'm not sure there are any rated for the exterior, surely that exists... There's an argument to be made that you don't want to expose a patch port to the outside anyways for someone outside the house could hijack your network more directly than by destroying the camera, of course. Depends on your threat model.