Can't argue with that, although:

> - FreeBSD Jails and Mac (These are extremely strong security features if implemented correctly. Especially jails are really undervalued/misunderstood IMHO.)

Aren't these are only necessary if you let people you don't trust into your system?

> - PF version runs on multiple cpus (OpenBSD's version is more advanced though)

Personally I dislike running PF on FreeBSD as it requires me to resort to old docs and use old syntaxes.

> - Capsicum (security)

Isn't this being ported as we speak?