@tpheine You know, he was able to turn the Xbox on. I wonder if he could be trained to turn the NAS off? I'm not overly worried. The password (as are all my passwords) is pretty evil and even if they did get in I backed the whole QNAP up to the ARGON EON a couple of weeks ago so it'd be Trivial to wipe the QNAP and copy everything back.
I suspect this is the issue:
www.qnap.com/en/security-news/…