does FreeBSD not have ASLR? I thought that was, like, standard among all modern popular OS's: Windows, OS X, Linux... right?
I think it's worse there's no sandboxing. Ports just runs all kinds of code downloaded off the internet as root. Latest version does have the very beginnings of some in Capsicum but it's not like OS X where every daemon is syscall and FS sandboxed.