Almost all off-the-shelf consumer grade NAS appliances are running unmaintainable OS yocto builds already 2 years out of support, and a list of CVE under active exploitation.

The only really functional OSS NAS exception for small offices is the CephFS builds from https://www.45drives.com , and that is because of included support services. =3