A lot of the work they do on their packages and in base stuff is pushed upstream to properly support security features OpenBSD supports. Everyone benefits from this because then such features can be enabled everywhere with less pain.