[Dylan16807]

Offering a layperson NAS buyer a self-signed cert is not "secure by default" even if browsers did accept it.

[lxgr]

Would it be less secure than unencrypted HTTP?

[Dylan16807]

No.

But if you want "secure by default" then neither one is acceptable.