Anything that you can buy off the shelf is compromised.
I use OpenBSD on all my edge devices. It's not perfect but it is superior to 99% of everything else. That combined with poisoning the replies to nmap scans (fingerprinting) puts me in the 'much harder' to compromise category.
"Security through obscurity" isn't security. But "Don't be where your enemies expect you to be" is still good advice.
Also, relying on 1 layer of security is insanity. You need multiple layers, you need isolation.
I use OpenBSD on all my edge devices. It's not perfect but it is superior to 99% of everything else. That combined with poisoning the replies to nmap scans (fingerprinting) puts me in the 'much harder' to compromise category.
"Security through obscurity" isn't security. But "Don't be where your enemies expect you to be" is still good advice.
Also, relying on 1 layer of security is insanity. You need multiple layers, you need isolation.