A lot of these points have been addressed in one way or another - 11.0-RELEASE has a new installer dialog[0] with multiple hardening options available. These ar

A lot of these points have been addressed in one way or another - 11.0-RELEASE has a new installer dialog[0] with multiple hardening options available. These are OFF by default in 11.0-RELEASE due to POLA principle, but they are to be enabled to ON by default in future releases (hopefully in 11.1). [0] https://secure.freshbsd.org/commit/freebsd/r302897 https://secure.freshbsd.org/commit/freebsd/r302897