A NAS is generally safe if you don't do anything stupid with it (there are footguns available of course). But you can easily cut it off from the broader internet entirely.