Hmm. Isn't there something to be said about running a less popular stack so the drive-by zero days won't affect you as much? Sure there are slower fixes, but also fewer people hunting for exploits. You're a less juicy target.
I think being used by any high value targets (like a notable FAANG org) would preclude FreeBSD from this technique.