Latest firmware still vulnerable

Its not clear if simply turning off Cloud Access/Remote Access is enough. Its possible, from the sounds of the following post in another thread, that the My Cloud may still be vulnerable even with Cloud Access/Remote Access turned off.

https://community.wd.com/t/reporting-security-vulnerabilities/96387/8