It’s possible, I’ve been tricked last year by a similar attack (the sneakiest attack possible to target privacy people, imho).

I praise IT Security for putting so many safeguards, sandboxes and verifications!

TL;DR Both are crap and don’t respect your choice when opting out. iOs is even (a tiny bit) worse than Android, as info of nearby devices are being also sent.

Tried the quiz. First question: an app request access to data, what do you do?

• allow all
• allow nothing and uninstall
• all strictly what is necessary (e.g. location for Uber)

Boy, first question and you already fuck up… Never heard about the concept of address?

You know that NAS can go in sleep mode, right? And wake up only when you try to activate them.

But what is the use-case? Only make your holiday films available to a media center? Or do you plan to also use it as a storage for other devices?

In the first case a sbc can do the trick (however can struggle if you share 4k). But I would definitely look into “real” NAS (Synology, qnas, etc.) before using a sbc.