FreeBSD 10 ships with Unbound in the base system too... Sadly, it's not enabled by default, but a lot of people enable it for performance (caching) and they get security for free.

# sysrc local_unbound_enable=YES # service local_unbound start