Security - pkg(7) signature validation (https://www.fabiankeil.de/gehacktes/hardenedbsd/) - Weak geli key generation in geli v7 (fixed in 10-CURRENT) (https://www.fabiankeil.de/gehacktes/geli-key-monitor/) - Multiple ggated issues (DoS, data corruption, disk space exhaustion, etc.) fixed in ElectroBSD. Patches sent upstream in 2014 and 2015. Not applied yet... (Stand 2017-12-06!) - Full disk encryption with "soft-protection"