One thing that would interest me: What about Ransomware? If everything is connected and synced, how to prevent getting everything encrypted before it is too late?

For me encrypted FreeNAS with readonly ZFS-Snapshots have been a good solution for this.