Some other good bits: development tools (malloc_history, spindump, leaks, crash logs, panic logs, dSYMs, powermetrics), security (code signing, ASLR, Time Machine), system APIs (Mach ports, XPC, launchd).
Nope. There were some patches but it never made it in somehow.
I think it's worse there's no sandboxing. Ports just runs all kinds of code downloaded off the internet as root. Latest version does have the very beginnings of some in Capsicum but it's not like OS X where every daemon is syscall and FS sandboxed.