Not sure about encrypted storage on the SD card, never heard of that.

However, reolink can be setup with the app once then connected to a VLAN that has no internet access and connects only to home assistant. Then you access the camera with home assistant only.

Requires technical knowledge to setup, but reolink cameras work well in this setup.