While many users update via a web browser or the Hik-Connect app, FTP remains a preferred choice for several reasons:
Best practices for secure and reliable use hikvision ftp firmware
Several deep-dive write-ups in the cybersecurity community have explored how Hikvision firmware handles FTP and network requests: CVE-2021-36260 (The "Command Injection" Flaw): While many users update via a web browser