Many people are actually misleaded on how P2P works. The technology does not broadcast your streaming to the web.
1. Your camera sends a regular heartbeat out to a P2P server.
2. When U request view of your camera, a signal/flag is turned ON on the server for the camera to know that a viewing request is initiated.
3. Your camera starts communicating directly to your phone to send the feeds to your phone and continuing reading the flag From P2P server.
4. You end your viewing and flag is turned OFF by your phone, n your camera stops issuing stream and resume step 1.
You get acess to your feed using each cameras's unique ID and your user name n account. All P2P heartbeat servers are hosted on cloud like amazon, azure, taobao, etc.
So level of security is actually in place as well. As long as you do not broadcast your cameras UID, login name and MAKE SURE you change your camera password. I
f you had read and listen to all the reports on cameras being broadcasts online freely, these are home security cameras that are using conventional port forwarding methods badly implemented.
Cloud cameras are safe, no one actually would implements such technology and risk their reputation and lawsuits.
Hope these explanation clarifies and clears the air here on how cloud cameras works and the security concerns