Regardless of source:

- your NAS should not be allowed to talk to the outside world

- you should wipe any pre-installed software and install your own OS