I only use Reolinks these days. RLC-410 - some dome and some bullet. Cheap and easy to setup. I'm a long term Zoneminder user which I get to watch the low res stream and record on the high res stream. My ZM is a VM on VMware with a cheap Nvidia GPU passed through for CUDA. This still works: https://wiki.zoneminder.com/GPU_passthrough_in_VMWare but I should probably bring the wiki page up to date.

I have a Reolink door bell too - I went for the PoE one. It's a lot better than my old Doorbird but not as sturdy. The door bird could drive a chime too which was nice. The Reo can't but it is a PoE powered unit with a UPS backing the switch. That's pretty resilient.

They never get to see the internet. I fiddle DNS so that pool.ntp.com points at my ntp daemons but I run an IT company so that might be a bit excessive for most! I have three Pis with GPS hats and antennae.

As you say, they are well supported by HA too. If you have a Coral and Frigate then you have lots of options. Just keep them away from the internet if you are concerned about who is looking through them apart from you.