VPN Security - cctv system

[stephan04]

Hi all, I have read up extensively on what the safest way is to setup cctv cameras for remote viewing. Some articles say VLAN with port forwarding because if it is compromised they can’t get access to the LAN. Other articles say VPN server and others again a VPN server with two factor authentication. Others say VPN server with cameras on VLAN.
Other articles say a vpn server is dangerous because you expose your whole network.

May I ask some of the network gurus here what they would recommend please?

Thanks in advance