Your local setup plus VPN/wireguard is a good design. For me, port forwarding on my router was a no-go due to the increased attack surface. Therefore, I wanted to use the cloud to route the videos and hence I decided to use a strong end-to-end encryption scheme (MLS).
Regarding the limitation you mentioned: I plan to address them. The next task on my plate is to support multiple cameras. :-)