you could always use netbsd if you want maximum security ppl are gonna nmap you and see that it is a netbsd box so they will think "that's a propped-up toaster anyway, no use hacking it" and you are safe