Pretty much this. OpenBSD is more secure out of the box, hardened gentoo can be made more secure if you have the time and skill to put into it.