?

That's why I love the OpenBSD approach so much - they fix even obscure potential security holes such as "if you're using this particular hardware driver and configure it with this particular setting then potentially there might be a possibility of a buffer overflow in certain situations that can be induced by someone with existing low privilege access to the machine" and do regular code audits.

One of the main problems with information security is not revealing all the information and believing in "security through obscurity". It is vastly better to reveal absolutely every detail of your system, and only then after the world has seen all the details can you be confident it's truly secure.