A good precaution would be to use a stand-alone machine
as an FTP server, this would mitigate the impact of possible
security breach.

All so use different folders / partitions for write and read (if
possible)
and strictly limit used user rights using NTFS, write folder needs only
write permissio...

[ more ]