Video feeds are transmitted in cleartext. Anyone on the same network (e.g., a coffee shop Wi-Fi) or an ISP intermediary can sniff the stream. This is particularly dangerous for indoor residential cameras.
In 2021, a security researcher using the dork intitle:"Live View" -Axis inurl:"view/view.shtml" found a feed from a veterinary clinic’s surgery room. The camera showed an ongoing operation with patient details visible on a whiteboard. The researcher was able to locate the clinic’s phone number via the camera’s background (a diploma on the wall). They called the clinic, explained the vulnerability, and helped the owner secure the camera. The fix took less than 10 minutes: disabling anonymous viewing and changing the router’s UPnP setting. Intitle Live View - Axis Inurl View View.shtml -
This is the ideal outcome of understanding such search strings – protection, not exploitation. Video feeds are transmitted in cleartext