My intuition was that malware attacks were less prominent nowadays.  I certainly cannot and will not deny the advantage of OpenBSD in front of malware, and I also cannot and do not ignore botnets, keyloggers, various code injection attacks, etc., but I believe nowadays what&#x27;s at the highest risk is what we store on others&#x27; disks, i.e. the <i>cloud</i>, and what the <i>commoners</i> do, like emailing passwords in cleartext, using clumsy inept passwords, not caring about https, not knowing that one <i>has</i> to block JavaScript, etc.  Aren&#x27;t these more easily exploitable <i>in practice</i> than say a stack overflow somewhere in my programs (not a rhetoric question)?  Though I&#x27;m no security expert.  But I know that it&#x27;s easier to get the bucks of a 50-year-old first-time-internet-user who&#x27;s heartly disposed to enter their Gmail password to any box with a <i>Password:</i> label.  I know many of them.  To many the URL bar is linenoise.  &quot;bank.com.hackersdomain.tk&quot;?  Some cryptic crap, I don&#x27;t know what it is, it looks like my bank.<p>The morale is an ignorant user can easily be exploited even on OpenBSD, while a security-savvy user can secure himself even on an insecure OS.  Thing is, the former is way more prominent, they&#x27;re in billions.  I don&#x27;t dismiss advantages to secure OSs, but say that the more important problem is inept users.