It's not so much the vulnerabiltiies as that OpenBSD's mitigations often seem targeted towards imaginary issues.