I heard BSD is popular among security engineers. Just wondering 1) is it true? and 2) how exactly do you use it for security research? Is it mostly for defense

I heard BSD is popular among security engineers. Just wondering 1) is it true? and 2) how exactly do you use it for security research? Is it mostly for defense or for offense? Thanks!