PFsense gleefully ships vulnerable code to their own customers. They are an even worse data point

https://arstechnica.com/gadgets/2021/03/buffer-overruns-lice...