Hacker News Reader

You are talking about base, they are talking about packages (and -current base).

I mean the system in general. I get new ports (like everything else) every six months. And when security flaws are discovered in third party software, they are fixed in the -stable branch of the ports tree.

https://www.openbsd.org/faq/faq15.html#PortsSecurity

Maybe you don't want / you do not have the chance to have sources and build tools installed on your production server and you trust mtier to build the patched sources for you. I find it very useful.

You don't update core/packages when there are security issues? How do you deal with this? I'd like to know alternative approaches to applying patches and recompiling. Thanks!

The alternative is to use openup from M:tier.