After Simon's post,
It has occurred to me, that while desk-top HD drives are protected from sudden power loss and surges, some NAS drives may be designed assuming there is a UPS in the system, so may not have this protection. Select your drives accordingly.
Similarly if the NAS device itself is designed for use with a UPS, then operating without one is a risk - either fit a UPS or select a NAS device designed for home use that doesn't assume the presence of a UPS. Many RAID systems that can operate above RAID1 do assume a UPS is present.
Storage maintenance subsystems should always be designed to use transactional storage protocols. If the file system is transactional it should pass the ACID test; if not the system isn't competent.
In term of system writes the (shortened) sequence should be functionally similar (there are other ways) to this...
1 Data inserted into buffer
2 Data written to transaction data journal on disk
3 File Directory switched to secondary MFT (atomic operation)
4 Primary MFT for file marked as incomplete
5 Primary MFT updated to reflect new disk sectors for file then marked
6 Primary MFT for file marked as complete
7 File Directory switched back to Primary MFT (atomic operation)
8 Journal MFT entries updated
9 Secondary MFT updated to reflect new disk sectors for file (deferred operation).
All the above can be implemented as 'write behind' without affecting the durability of the system.
Incomplete writes to the transaction data journal do not affect the data in the files, and the journal is flushed on recovery. Before 7, you recover the old file data, after 7 you get the new file data. There is no ambiguity.
At all times, after recovery what you have is either the original file untouched, or the new file completed. At no time do you have inconsistent data after recovery.
If you get corrupted data or a corrupted disk then you've had a system failure (which is always a risk with any system during the stress of an unexpected power cycle).
(Or you were using a system designed specifically for use with a UPS without one, which is the fault of whoever specified the system).