Multiple questions after setup

[kmaultsby18]

I have just completed the setup and transferred files to my new TVS-h674. It has two 1TB M.2 Nvme ssd which I am using for storage pool 1 for QNAP Apps and container station, and I have six 10TB drives installed. I have set up my Plex media server and QVPN for external access.
I am looking for advice and suggestions for the following subjects.
1. Can I connect two network cables to the NAS from the same switch? Connect one connection to Adapter 1 with static IP and another connection to Adapter 2 with a different static IP address. I want to do this by using Adapter 01 for regular stuff and Adapter 02 connected to a Virtual switch for VM's grandson's Minecraft server, etc. I sent a help question to Qnap about this, and while I was waiting for a reply, I had to call them on another issue; so while I had the technician on the phone, I asked him the same question, and he said no I could do this, but the next day I get a reply from QNAP that said I can. What's Up?

Question two. Security. I set up OpenVPN on the NAS. Currently, I have Access Control set for Customized and Web Administration, Web File Manager, Secure Web Administration, Secure Web File Manager, Web Server, Secure Web File Manager, and Music Station Enabled but not Publish. myQNAPcloud link is set to Normal DDNS Enabled, and SSL Certificate is not installed. Is this ok, or do I need to add or remove anything?

Next question: I want to create a Ubuntu VM; what is the difference between Ubuntu Linxus Station and Virtualization Station? Advanages dis-advantages.

Question 4: I was looking at Backblaze, IDrive, or QNAP'S new myQNAPcloud Storage. Backup off-site. I love hearing from others. Opinions, Likes, dislikes.
I will be backing up important documents from all my computers. Family Videos and JPEG photos.
Question 5: 2FA, yes or no? If yes, what application do you recommend?

Thank you all in advance.

[dolbyman]

1. You can run different applications on different IPs, or aggrate connections via SMB multichannel up to you (doubt a minecraft server would use much bandwidth though)

2. Put your VPN server on a router or dedicated device, switch off all other cloud applkcations and disable mamual port forwards and upnp (on router)

3.
viewtopic.php?t=156008

5. No...hinders you..does not keep out bad guys (bad QNAP implementation)...just never ever ever expose your NAS to WAN

[kmaultsby18]

When you say switch off all other cloud applkcations and disable mamual port forwards and upnp (on router) I know not to use upnp but I do not understand disable manual port forward. Don't I have to use port forward for apps like Plex minecraft server etc.?
(switch off all other cloud applkcations) That means turn off myqnapcloud DDNS etc?

[kmaultsby18]

How dose qfirewall plays into this option?

[dolbyman]

You didnt mention external access on Plex or minecraft in the initial post..if you want to run them native..add the little bit of obscurity and change the incoming port

Qfirewall is best uninstalled