Ok, lets get real for a moment. Can we?
'Network Attached Storage' - NAS systems sit on your LAN offering both storage space for other attached devices and sometimes applications and other services.
The devices can be configured to be ether 'wide open' (IE: will communicate and share stored data with anything that can communicate with it) to various forms of 'lock down' requiring password protected 'accounts' to access data or change the device settings.
So there are a few assumptions here. (in no order)
- ether the data is valuable or the loss of it would create a undue hardship
- 'bad actors' are interested in ether accessing or destroying the data (for fun or profit)
- ALL security can eventually be breached requiring endless updates to mitigate threats
Forgetting for the moment that countless other security functions may (or NOT!) need to be breached before a 'bad actor' gains access to your LAN that has one of these NAS systems attached the owners of one of these devices may have much much bigger problems then the version of software/firmware running on this device.