I think you are correct, probably the best of solutions and 'we' manage it.
I am also exploring a bit more OpenWebIf [when I can] to learn my way around and now I am connected using Filezilla [I normally use since ever] too and downloading Movie folder etc. - just checking out things and to re-list all recordings ONLY on Movie folder and put it back 'after' I disabled Grog or uninstalled.
Is a Password really needed? [i.e. security ... router ...] - I am a Security Nut!