[txutxu]

I'm not following the project to much, my only experience with NetBSD was to bring back to life an i486 laptop with 4M of RAM, many years ago.

What I'm less confident (probably because of my ignorance, i'm talking without numbers) is by how many eyes are looking into security issues/bugs. How much time takes a port to be fixed and available to users, compared to other vendors, for example.

Not saying that there is not an excellent work of those involved, but maybe, more mainstream OSs have the two sides: more people working on new attacks, and more people watching for security issues, or paid to work on patching/packaging etc.

[hulitu]

> is by how many eyes are looking into security issues/bugs

Windows and Google have many eyes looking into security issues/bugs. This does not seem to have any effect.