Network security : Synology NAS remote access Webdav vs Open VPN & best way to protect your network (Raspberry Pi, UTM based on Sophos or pfSense)?

Question

I am occasionally volunteering for a small NGO that has been hacked early December and which asked me to strengthen their network and implement a safe remote access to their