I agree with both of you that QNAP's perceived "vulnerability" has been overblown by the media for the sake of page views and ad revenue. I think the chances of exploitation are relatively small.
I don't mean any disrespect and would not try to dissuade anyone from making full use of their NAS in whatever way they choose - that's what they're there for.
I would say that I think the difference between many *nix distros and QNAP is that QNAP has sometimes been a little slower to acknowledge and address (i.e. patch) vulnerabilities. The vast, vast majority of users see no negative impact whatsoever from this. You might disagree with my opinion and that's valid.
With that said, I have worked on/led cybersecurity incident response teams for the last 10+ years, and worked in IT for a lot longer than that. While I have yet to personally work an incident where the root cause was attributed to a QNAP product, I have seen plenty of incidents where vendors hadn't addressed flaws in a timely manner and threat actors took advantage of that.
I could probably leave things as they are on my home network and be just fine, but this is a choice I made. I didn't state my reason in my original post because my motivation has nothing to do with your app and because I didn't want to unintentionally dissuade anyone from using it. I probably should have PM'd my response to your question to keep it off the forum.
Apologies if I ruffled any feathers! Signing off, and thanks again for all your hard work.