High quality code reduces instances of vulnerabilities, which is great. But code vulnerabilities are only one of the many factors in assessing security. To be

High quality code reduces instances of vulnerabilities, which is great. But code vulnerabilities are only one of the many factors in assessing security. To be considered a secure operating system, you need to have more mechanisms in place to protect against various threats, and the OBSD developers actively resist that. I'm familiar with their innovations and solutions, and I think they fall far short.