I agree, However: This is also something that OpenBSD is guilty of— defining security as things like strlcpy (which experience has shown causes its own mistakes

I agree, However: This is also something that OpenBSD is guilty of— defining security as things like strlcpy (which experience has shown causes its own mistakes) or an OS with all services off while eschewing security functions others have deployed (like the SE Linux stuff mentioned there, or the excellent virtualization features in other OSes). > And other operating systems have come around to adopting OpenBSD's security features and techniques, rather than the other way around AFAIR, the PAX/NX stuff was available on Linux back in something like 1999 or 2000, several years prior to OpenBSD— likewise for many of the things in that slide deck. OpenBSD been a leader in some techniques, and a follower of others. I think sometimes the public doesn't get to see a complete picture do to the excessive fandom and politics. Relative to the level of investment in it OpenBSD does very well, but they're not the lone light of security insight some some people try to make them out to be!