True. In the real world, it could be that SLES is the more secure commercial distro because nobody disables the AppArmor that is enabled by default.