Quite true, and if your serious about security, you'll be sure to follow any packages you're using. The benefit of OpenBSD is that it ships "Secure by Default"

Quite true, and if your serious about security, you'll be sure to follow any packages you're using. The benefit of OpenBSD is that it ships "Secure by Default", unlike a ton of other distro's: "To ensure that novice users of OpenBSD do not need to become security experts overnight (a viewpoint which other vendors seem to have), we ship the operating system in a Secure by Default mode. All non-essential services are disabled. As the user/administrator becomes more familiar with the system, he will discover that he has to enable daemons and other parts of the system. During the process of learning how to enable a new service, the novice is more likely to learn of security considerations. This is in stark contrast to the increasing number of systems that ship with NFS, mountd, web servers, and various other services enabled by default, creating instantaneous security problems for their users within minutes after their first install."