People here likely know how to do all that safely, but lots of less technically inclined people end up with their data encrypted and have to choose between starting over or paying a ransom. I have a QNAP device so I follow their subreddit and there's a steady stream of people who have lost everything to ransomware because their NAS was visible from the internet. I follow the standard advice from that subreddit - keep it behind a firewall with UPnP turned off and no ports forwarded to the NAS and never enable MyQNAPCloud (or whatever it's called).

I vastly prefer content be cloud based. Ever since Spotify came out, I've never downloaded music illegally again -- it's just so much better and more convenient. Can't imagine going back to what.cd days and having to download and maintain a music collection manually.

Mind sharing your setup, I’d love to replicate it. Thanks