Open bsd is targeted and does get CVEs though... the question is about the amount of attention compared to other platforms