Huh. TIL. Thanks!
On the security principle, discussing weekly replications: yes it is good practice to airgap your last resort backup. The target repo should pull only, refuse incoming connections, and remain out of reach of potentially tainted renegade source hosts.
This shouldn’t sound complicated. Power-on; perform transfer; shut down.
Mind you, that’s not something that you’d look to a NAS appliance to tackle. NAS appliances have other mandates which could very well undercut this specific use case.