For new installation there is a bsdinstall (default FreeBSD installer) 'hardening' menu with security related settings proposed for a fresh system making use of

For new installation there is a bsdinstall (default FreeBSD installer) 'hardening' menu with security related settings proposed for a fresh system making use of many long time available security mechanisms. It's been there for quite a while, but those settings aren't imposed on existing users who installed their systems with bsdinstall version from before the menu appeared.