> I don’t mean OpenBSD: it’s secure because it doesn’t enable much. If you want it easy for the average joe, it's going to be measurably more insecure. If you

> I don’t mean OpenBSD: it’s secure because it doesn’t enable much. If you want it easy for the average joe, it's going to be measurably more insecure. If you want it secure, it's going to be barebones by virtue of intentionally having reduced attack surface. That's just how it goes. Unfortunately, I will concede that default Linux is in an awkward spot of being too insecure to be considered "secure enough", and too difficult for newbies to configure properly.