Port forwarding's fine and all, but why not go VPN? Even with a firewall, exposing a port directly gives me the jitters. OpenVPN or WireGuard on a Raspberry Pi can be a neat little project and adds another layer of protection for remote access.
Decentralization rocks! 🔒 Remember folks, your NAS is as secure as its weakest point. update regularly, audit your logs, and maybe even consider a UPS to protect against power surges. And don't port forward if you can help it; use a VPN instead for remote access.