I am not native English speaker so sorry for misunderstandment
I didn’t say it’s overall better
I said even though on base level OpenBSD is much more clean and secure than Linux it lacks or lags behind Linux in adding mitigations for security vulnerabilities
And there are far less eyes on OpenBSD so many vulnerabilities don’t get discovered in first place
Any software can be malicious even essential ones just look at recent Xz vulnerability (And it was discovered by sheer chance), OS should have systems in place like proper sandboxing, permissions (Not half baked one like flatpak) …
Secure from malicious app programmers (Unlike what other people think open source doesn’t equate safe, even reputable essential ones can be malicious like recent xz one)
Secure from remote attacks and botnets (Only reason this haven’t been a larger problem is because linux desktop users are too few to worth targeting, though that may change with rise of steam deck)
Physical integrity guarantee and protection against manufacturer while nice are very hard to get in current climate
proper sandboxing and permissions, auditable code and small attack surface as opposed to spaghetti code glued together that’s impossible to audit, regardless of threat model those things are needed, even linux is moving in that direction (Though very slowly and very half baked like with flatpaks)