Furthermore: reject them not only when the regular use goes through a cloud, but also anything that needs a specific app download or cloud connection just to change settings. All functionality available on local network and with standard tools or nothing.
I saw that a lot with cameras. "It has ONVIF, you just have to download--," nope, that's it, next candidate.