I feel obliged to point out that this blog post is roughly 5 years and 1 month old. People change, opinions evolve. In just a few years, vast technological landscapes can shift. And don't get me started on config files. Please consider this text in the context of its time.
Darren Moffat just wrote in the Solaris blog on blog.oracle.com about important news for Oracle Solaris 11.4: Solaris just got its Common Criteria certification based on the Protection Profile for General Purpose Operating Systems and the Extended Package for Secure Shell.
You find the PDF copy of the certificate at commoncriteria.org.