I have a different Synology model (added extra RAM because it serves as an *arr server at the same time), and while I'm a big proponent of FOSS I must say that the 'peace of mind' section in this article really hits the mark. Hacking things together yourself is great, but when it comes to 20+ years of your digital data, I'd rather be safe. Also, encryption on and Synology QuickConnect (or whatever its Tailscale variant is called) off as a default.