My current solution is:
- NAS (QNAP) at home with various apps
- Exposure towards the internet is SSH, VPN and https (with self-signed certificate)
The only weakness in this scheme is possible flaws in SSH, OpenVPN or SSL. Ignoring those, whatever I do remotely on my NAS is for my eyes only. Accessed through either my smartphone (n900) or debian based linux systems.