I lack hands on experience with it, but my understanding is that
OpenBSD is easy to secure
once, and
only once.
Updates and patches to a live system after the fact? Forget it, last
I heard, that wasn't supported, their advice was to rebuild from
scratch, more or less like you first installed it. Correct me if I'm
wrong...
Oh yeah, if it was up to me, I'd use Debian for everything,
barring some much more compelling reasons than "Oracle Corp. says to
use Red Hat". Like say, running Linux on an embedded microcontroller
that's just too small for Debian, that sort of thing. :)