In an encryption event the on-premises appliance sits inside the blast radius, which is what makes the Cloud DR path the substantive change in this release. A copy already held in Amazon S3 or Azure Blob Storage can be restored directly into an EC2 instance or an Azure VM with no round trip through on-premises hardware [5]. Synology describes that as significantly reducing recovery times and gives no measured figure, so the claim is architectural rather than benchmarked [12].
Cross-platform recovery is the other piece that ships now. A workload captured in one environment can be brought back in another, which Synology positions for both disaster recovery and workload migration [3]. It is one mechanism serving two different buyers, but the responder's interest is narrower than the migration pitch: the platform that was compromised is no longer the only place the workload can start.
The controls aimed at a contaminated backup are not in this build. Anomaly detection per backup version, tracking change rate, file modifications, mass deletions and entropy, with suspicious copies moved to quarantine for an administrator to review, is scheduled for APM 2.1 [7]. So is pre-restore malware scanning through Microsoft Defender, Bitdefender or ESET, with Auto Fallback restoring the latest clean version when the newest backup is infected [9]. Both features that address the case where the backup itself is the problem are held for 2.1 [11]. Synology calls 2.1 upcoming and names neither a date nor a price [10]. APM 2.0 itself is available across the DP Series appliances [13].
The security addition that did land is software-based volume-level encryption, scoped in Synology's own description to drive theft and hardware loss [6]. That is the stated threat model: a physical-loss control [15].
As market evidence the release is thinner than its feature list. Four of the five newly covered platforms are compute targets and the fifth is a SaaS suite [14]. One appliance vendor extending hypervisor coverage in a point release shows what Synology believes its buyers run [2], but it is a single vendor's read on its own customers, not an industry baseline. Jia-Yu Liu, who runs Synology's Data Protection Group, argues the case on cost: fragmented backup infrastructure raises spend and slows recovery, and APM 2.0 consolidates hybrid coverage into one console [1].
Deciding whether a restore is safe to run is the job left to 2.1, which Synology has not yet dated [10].
