I've read the most secure way to handle backups is to have the server initiate it and be un-writable to the client. This prevents encrypting viruses from getting your backups as well as your attached drives, which would be quite catastrophic.
Does anyone know of a way this can be achieved? I currently have a NAS running unRAID at home and several computers running windows 7/10 which are rarely, if ever, backed up.