OpenBSD specifically has a very strong focus on security features - not just bolt-ons like containers and cgroups, but a code and development style which reduce

OpenBSD specifically has a very strong focus on security features - not just bolt-ons like containers and cgroups, but a code and development style which reduces the change of security-related bugs, and things like pledge(2) and unveil(2) which allow applications to reduce their privileges drastically through a far simpler interface than Linux's equivalents.