Every FreeBSD package was compiled in a fresh jail whose network was cut once the sources had been fetched and checked, and every night the system compares what it has installed with the project’s list of known flaws. Nobody had to switch either of those on. On Linux each distribution decides for itself how strictly its packages are built, and the administrator who builds a package of their own decides again. Lean Software.