The *BSDs are nonexistent in the raw data [1].

Of course less code leads to less security holes. But 0/376? Or is project zero excluding BSDs entirely?

[1] https://bugs.chromium.org/p/project-zero/issues/list?sort=id...