This morning I booted up and went to login on my unraid page dashboard.
The dashboard popped up without verifying any credentials! I closed the browser and reopened it, and then it finally asked for credentials/login.
Then I went to my phone browser to verify and the same thing happened.
This is obviously very disconcerting. While I don't have access on from outside my network/LAN, it is still a huge security risk if a virus tries to gain access to a PW protected share.