Bests & Worsts Reviews from Amazon

I bought one of these (F2-221) for myself to perform some server upgrades in my home lab, as well as personal storage for some childhood videos my father recently converted. I setup ACL rules, as well as firewall rules on my Unifi USG-Pro. The only thing I enabled was TNAS.online (in terms of external facing features). About 2 weeks into its life, the TNAS started randomly rebooting at night. I checked the auto reboot settings, nothing. Odd, so I monitor the shell for a night after 1am. As I'm monitoring, a process called xrmin (and a few others) is executed and consumes 100% of the spare CPU. Due to my firewall rules, the resulting traffic isn't leaving the network, so I'm assuming the reboot is a part of the fail-safe mechanism of this crypto-mining binary? I let this happen once more before deciding to intervene. Like clockwork, at exactly 1am again, this process is initialized and immediately consumes 100% of the CPU. I initiate a kill <PID> command, and kill the process. The CLI immediately states a "the system is going down for reboot now!" styled message ( which was called by another PID that I can only assume is what monitors the integrity of the cryptomining agent/service - called xrmon). Upon reboot, can you take a guess what is missing from the device now? The cryptominer - OH and also all of my data. The drive was completely corrupted. Thankfully, I also host an off-premise backup thanks to Backblaze S3... I would be missing hundreds of hours worth of work and years of memories from one simple, cheap, and unsecure NAS! I decided to research this and found another reviewer who experienced a similar cryptominer on his machine, and provided pictures - an issue that was posted in 2019. I'm assuming that my case is a little different because my firewall rules prevented the cryptominer from any ingress/egress data, and any data from it's C2 (which is encrypted via TOR, so I did not have much luck finding who is responsible) was not able to be transmitted or received. I decided not to call technical support, because I just want a different NAS. I won't purchase anything from Terra-Master again, and will be returning this immediately. I would recommend, if Terra-Master ever reads these, that they use 2fa on the TNAS.online service, as well as get their Android App signed because it triggers my Sophos Intercept X which is coming back as a "PUA"... I'm still unsure how this crypto came to be, but I am thinking it was pre-loaded on this device because the only time this was able to connect to the internet internally was when I was checking for firmware updates.... Buyer beware.