Grouping all BSDs together is a mistake. Exploits found for one likely won't apply to any other.