Its not clear if simply turning off Cloud Access/Remote Access is enough. Its possible, from the sounds of the following post in another thread, that the My Cloud may still be vulnerable even with Cloud Access/Remote Access turned off.
http://wdstagingsplit.staged-by-discourse.com/t/reporting-security-vulnerabilities/96387/8