Regarding OpenBSD and security it is far easier to have secure system when starting with everything disabled and only enabling what is needed. When things are e

Regarding OpenBSD and security it is far easier to have secure system when starting with everything disabled and only enabling what is needed. When things are enabled by default often disabling them breaks something, and to not waste time creating extra problems most people leave them enabled. OBSD also has a lot of changes that increase security overall. They prioritise security over performance. It's not just the minimal installation. Regarding Docker vs BSD Jails (or more correct comparison is LXC vs BSD Jails) is that containers in Linux is combination of namespaces + cgroups. That design gives much more flexibility, but is far far harder to make them secure. There was a submission not long ago taking about it.