I’m thinking of picking up an old HP Microserver (gen8) and was wondering if it is a bad idea from a security standpoint.

I mean it’s only 10 years old - is there any exploit or something like that?

What about a N36L Microserver?

I’d probably run Debian headless on it.

I’d only use it for Syncthing and as a backup NAS.