01-08-2026, 04:32 PM
About your main question: yes, you can safely store your child’s photos on TOS as long as you use it correctly. Terramaster had security problems years ago but they have improved TOS 5 and TOS 6 a lot. The current OS does not behave like UGREEN’s early DNS situation, and it does not send unexpected traffic outside your network. For normal home use, TOS is safe provided that you avoid exposing it directly to the internet.
For your use case, here is the simple rule. If you run Immich locally and only access the NAS over your home network or through a secure VPN like Tailscale, the risk is very low. Your photos never leave your home network and nothing is published to the outside world.
TrueNAS is still the more private and more transparent system long term because it is fully open source. If you want absolute maximum control and peace of mind, then running TrueNAS on an external SSD or a small DIY box would be the most secure approach. But it is also more technical and requires more time to learn.
If your priority is strong privacy with as little complexity as possible, keeping Terramaster and hardening it is the better path. Just disable unused remote access services, use a VPN for remote viewing, and let Immich store everything locally. That setup is perfectly safe for family photos.
For your use case, here is the simple rule. If you run Immich locally and only access the NAS over your home network or through a secure VPN like Tailscale, the risk is very low. Your photos never leave your home network and nothing is published to the outside world.
TrueNAS is still the more private and more transparent system long term because it is fully open source. If you want absolute maximum control and peace of mind, then running TrueNAS on an external SSD or a small DIY box would be the most secure approach. But it is also more technical and requires more time to learn.
If your priority is strong privacy with as little complexity as possible, keeping Terramaster and hardening it is the better path. Just disable unused remote access services, use a VPN for remote viewing, and let Immich store everything locally. That setup is perfectly safe for family photos.