Just set up an old computer to be your nas and call it a day. Would be much quicker, and you can be much more confident it does only what you want it to do

My son has my old computer for playing fortnight. :)

So I'm reading up on TrueNAS to see if that's the way for me to go.

Frankly, I love my Synology, but it at EOL (can't do the new version of DSM) but my needs are pretty simple, hence either straight Linux or TrueNAS seem to be my best options.

I do- it was just a curiosity given the topic.

I tried to start implementing separate lans/vlans at home for trusted and untrusted devises. But quickly realized I don't really trust any of it, save my personal laptop and a few of the servers I run.

... and after a while, when you realize the hole goes deeper, you stop trusting these as well

It's pretty much devolved to users instead of devices:

1) devices only I have write access to 2) devices others have access to 3) iot (which are basically users I've never met)

At least I can segregate me running a port scan from my laptop, to a family members phone running a portscan from some spyware game they downloaded.

I have a good idea how much I can trust my own devices, even if my phone's baseband OS is sending an unstoppable stream of location data and super cookies.

But this NAS/cloud connected storage thing is a bit of a oddball, since you're supposed to trust it with your data, but can't trust it with unfettered network access.

intel/amd me running second own os on everything. One malicious lib, GG security theatre.