Not necessarily for security reasons, but more as a byproduct of keeping things simple so we can manage them manually.
Xbps, its packager, is a breeze to use. And I've found no major qualms with runit, the init system.