What I&#x27;m saying is simple: there&#x27;s the security of the code and the mitigation itself to consider. I know of no talented people interested in devrloping bypasses for OpenBSD mitigations since nobody uses OpenBSD. So, they break even more clever stuff in Chrome, Windows, etc.  Given your example, lets change the mitigation to make it more obvious, though.<p>OpenSMTPD (email for short) is the target. Default are Windows, Linux, and OpenBSD on x86. OpenBSD devises a mitigation: use SPARC processor since x86 malware cant work. As you say, the malware works on everything but the SPARC box. You and others claim it means the mitigation is secure and so is what uses it.<p>Now, some guy named Nick claims it&#x27;s no more secure than a BSD&#x2F;Linux 0-day on x86: they just didn&#x27;t target exploit for that environment. Sure, they have to learn SPARC ISA and how OBSD uses it. Sure there&#x27;s work involved. Similar mitigations were beaten in the past by first person willing to invest effort, though. So, Nick posits reason SPARC is safe from x86 malware coders is that they don&#x27;t care enough to deal with SPARC boxes. Maybe no market share.<p>See how that works now?