I figured out the issue thanks to you guys helping me troubleshoot. It turns out that I had a DNAT or Firewall rule incorrectly configured which was forwarding all traffic externally to my NAS. It was meant for Plex (which runs on my nas) but was sending everything!
This line made me question why my OpenVPN client traffic was trying to hit 192.168.4.95 (NAS)
Dec 22 09:42:20 router kernel: [WAN_IN-10-A]IN=eth0 OUT=switch0 MAC=80:2a:a8:8e:b5:5b:00:14:f1:e7:93:31:08:00 src=70.194.14.150 DST=192.168.4.95 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=56645 DF PROTO=TCP SPT=9753 DPT=32400 WINDOW=4128 RES=0x00 ACK URGP=0
Another clue which I should have caught was when I did an external port scan to make sure 443 was open there were a ton of other ports open. Looking back, the ports that were open were all NAS services running, hah!
Thank you both for helping me troubleshoot this. I learned a lot in the processes.