But if such things are avoided across the board as policy, exactly to attain the result of reducing that attack surface, then there are few such possible exampl

But if such things are avoided across the board as policy, exactly to attain the result of reducing that attack surface, then there are few such possible examples, and so you can't just say "it could be anything" you have to show that there is actually much pool of "anything". What's an equivalent example that could actually happen in openbsd?