Firstly, I apologise, my previous post, when I reread it this morning did come over as arrogant, which wasn't my intention. Sorry 
It did come over as slightly "Mr Know it all".....but it's cool, I've chilled slightly since last night and I'm not taking it to heart.
Text based communication is limited at the best of times, and you can never really interpret what the other person feels when they type something.
The NAS question that was raised, the point I was trying to raise, was that any home type NAS is only suitable for pretty basic file sharing, and where performance, and in many cases security as well, isn't an issue. A long way removed from a real NAS setup, yet many of the home type NAS devices try to claim or imply they are similar.
Aha, now I realise you think along the same lines as me.
As you say, the kit aimed at the home user (which has stolen it's acronyms from the pro stuff), is indeed taking advantage of ignorance and doesn't even come close to offering what it may lead the end user to believe.
As to the OOF server, its hardware is a workgroup class server. The hardware it runs on - HP Proliant - does far more that run a poxy website 
I never for one minute suggested that OOF was a "poxy" website, and I apologise if this was the impression you got from my previous input.
As it's an HP Proliant, I can tell you it's whacking a fair bit in the power stakes though (even at idle)

Not sure how much legacy datacentre experience you may have, but even 5 or 6 years ago, the power requirements to power the servers at the datacentre I'm based at needed 6 generators, each one alledgedly capable of powering half a small town.
Before I jacked IT on the head, I was regularly at Canary Wharf dealing with the likes of Redbus, ClaraNET, etc (major players in the grand scheme of things)
Hence why all servers, no matter on the size, power requirements are critical. Hence why workgroup servers with a simple set of 2 or 3 disks can meet the 100W barrier with ease if they are not too busy.
I would argue that it a lot of it depends on the PSU design as well.
My own personal (home tower) system uses a Silverstone Strider ST1000.
This has a 96% efficiency rating (considered $hit hot as you will know in the world of SMPSU) which will deliver a true 960W on the secondary side under full load while remaining within spec.
It draws 205W off the mains when in normal use, and hits 245W in gameplay use (gameplay being simple crap)....not bad considering it's keeping an overclocked dual core (3.2GHz o/c'd to 3.8GHz) CPU with 6MB of L2 cache going, along with 4GB of DDR3 RAM, a RAID 0 array, 2x 1TB slave drives, a pi$$y GeForce 7300 PCI-E graphics, a modified (modded for reading Xbox360 discs) Samsung DVD-ROM drive, along with a Pioneer DVR-216 burner as well as a multi card reader and a floppy drive.
Now replace my optical drives and crappy graphics for another couple of HDD's....and replace my PSU for the nowhere near as efficient PSU's you get in the pre-built hardware....and it's quite easy to see how you will get near the 300W mark.
Add a redundant PSU, and you've doubled that power consumption.
How do they reduce power requirements?
At the CPU level, Intel has made big inroads with its new architectures since abandonning it's NetBurst architecture.
Intel have been at the forefront of power saving technology for years, that is no secret.
AMD are following suit, but fell a bit behind when it took its eye off the ball to gobble ATI.
With all due respect, AMD have been chasing Intel for years in both power saving and performance......and they have never quite managed to catch Intel.
The other big power hungry device in server class systems is the disk system. Pretty much everyone has gone over to 2.5" disks, initially derived from laptop technology.
Now that's where you have to swallow on your earlier statement IMO......a full on server powering up 4x 3½" disks running at 7200rpm and pulling just under 60W is (while not impressive), something to think about.
I am, obviously, very interested to hear of your concerns about YaBB's security - please PM me if you have any info 
Make no mistake, If I can be ar$ed to look for holes (and I'm sure I'll find them if I look hard enough), then you will be the first to know (via PM of course).
If you really want peace of mind, then scrape another £100 together and migrate to something like vBulletin....I'll quite happily talk you through the migration process so that no info/posts/etc is lost.
As to the hosting company giving out a load of FTP passwords, I assume you mean the hosting company for our images server?
Not quite, I'm talking full access to the servers themselves......again, that is not the sort of subject I will divulge too much info on in an open discussion.
CHARACTER LIMIT REACHED....SEE NEXT POST FOR CONTINUATION.