Reply to post:

"if you don't want to use an SMB share"

SMB or anything that extends the server's file system into the clients' is part of the problem. It allows an infection in the client to wander over as much of the server's file system as it can see.