Since writing this comment, I learned that the homekit secure video feature is e2ee by default regardless of that feature. You can't even turn it off. Apple doesn't have the keys.