“I’m totally screwed.” WD My Book Live users wake up to find their data deleted | Ars Technica

This isn't even the first time their MyCloud platform drives were compromised. The first I became aware of was a kind of backdoor where if you left it using the same name (defaults to "WDMyCloud" on the network), you could craft a link that javascript could load or the user could click on, masquerade as THE administrator account and wipe the drive without a password. And all that with just a link.

I have a WD NAS but it's an older one. I use it as media storage. I'd end up missing a bunch of movies but that's about it. I can't imagine using an NAS for anything absolutely critical except as cloud storage where a computer also has a backup (therefore not the only copy that exists).