Unifi Protect is what runs on the CloudKey/NVR physical device - you don't need to have it go through to the Internet.
Remember, for better or worse Ubiquiti is positioning themselves as SMB Enterprise security - some companies won't want their footage to be accessible outside their network.

My dude. It's threes all the way down.