- By default, most network services are turned off.
- The default remote access method is SSH. (After you enable Remote Login in the Sharing Preferences, of course. By default, even this is turned off.)
- The root user is locked out by default. Sudo is used to do root-type stuff and even that is only accessible by administrative-level users.
Gee willikers, that's more security-minded than any Linux distribution I've used. (Yes, I know, there are "secure" Linux distributions. Bastille can harden a system to some degree. But RedHat and others should take this OSX approach; don't turn things on unless *specifically* asked to.)
Now if only Apple could get their collective head out of their ascii on hardware... sigh. Thank you Jobs for killing the clone market.