If NFS isn't the answer for an all-Linux setup, what is?

NFSv4 + OpenLDAP + Kerberos would be the correct answer in this particular case based on OP's concerns. Not right for everyone, just them and just in this case. This assumes all devices are managed. For others it may be a complexity trap.