Isn't that a good thing for certain use cases ? If you are building an appliance type thing (say a storage or networking device) then you would want something minimalist you can add only the necessary services on. And arent those the types of devices the BSD (in general) are used for ?

Less attack surface always equals less potential for bugs/flaws/exploits regardless of how good red teaming tools and workflows get.

Now obviously for other use cases Linux could be a much better option.