@feld

Ok, unfortunately for some reason FreeBSD is in minority so it's 90% projects I've seen runs on Linux ¯\_(ツ)_/¯ Which is not bad in terms of security, and I've especially beloved all its numerous process confinement features (systemd, AppArmor etc) but... it's software so it needs updating anyway.

I've tried HardenedBSD and I'm watching its progress, but I haven't yet found a practical use for it :)