I have an old ReadyNAS I use for offline backups. Only turn it on to xfer already encrypted folders to it, then turn it off.

You should be able to even unplug the CAT and xfer with usb