I tried to be super secure on my NAS and set access rights for the everyone group to no access. Of course this did what it said and provided no access to all users. Changed back to read and we were good.
The everyone group is all users on the QNap, not anyone who might connect like a guest account. Pieced together the answer from the forum.