Comment by floatboth

Honestly, most of the concerns are rather superficial.

You might want to try HardenedBSD instead of regular FreeBSD though, to get all the exploit mitigation stuff.