First, a lot of code migrates around, look at any of the release notes for any BSD and watch how much is from another BSD project. These are not silos.

Don't get me wrong, I love FreeBSD and use it for somethings, but they don't really take security very seriously. Theo just gave this lecture with examples http://tech.yandex.com/events/ruBSD/2013/talks/103/