>Physical access is not a problem when basic other measures are not taken.

Why? In my home I have a Synology NAS server, not connected to the internet, where I store unencrypted data. It's not secure out of the box, and I didn't attempt to harden it.

You are welcome to hack me. Good luck.