http://netbsd.i2p/gallery/presentations/khorben/asiabsdcon2017/Hardening%20pkgsrc.html
A key feature of pkgsrc is its ability to abstract the specificities
of the host Operating System and build environment away. This versatile,
centralized software repository provides a great opportunity to apply,
experiment with and maintain security features for a complete software
distribution.