Truthfully it's the kernel rather than userland I'd be more concerned about. It might be open-source but it's an enormous piece of software. Heartbleed showed

Truthfully it's the kernel rather than userland I'd be more concerned about. It might be open-source but it's an enormous piece of software. Heartbleed showed us that serious vulns can slip through, and AFAIK the kernel hasn't had a truecrypt-style security audit (which I believe it deserves). I don't think BSD is necessarily more secure, despite what that Theo blowhard has to say.