Does your NAS have access to the Internet? If so, I wouldn't do it. I have a computer set up as a file and media server, and it does not have access to the internet (no default gateway). In that case, I would be ok turning off password-protected sharing.