doas.conf makes things clear to me what I'm enabling.

And we have the OpenBSD folks focused on clarity and security.

Switched to doas a couple of months ago on my FreeBSD box; it’s been a seamless switch.