Synology DS925+ vs DS425+

Okay, yes, with Synogoly, you don’t need a software firewall or hardware firewall, and it handles everything from its own system. It’s already blocked thousands of IP addresses from all over the world, and so on. I do need to open a few ports and have an SFTP connection. But I read everywhere that the security is poor, even with the QNAP software firewall.