And less supported software! Open-source programs can often be compiled for FreeBSD but many closed-source and some open-source software won’t work in FreeBSD. There is the Linuxulator, which is basically Wine but for Linux programs on FreeBSD but it doesn’t have perfect Linux software support yet.
Tell me more about SSL certificate forgery. As far as I know, for a device to trust it, it needs to be signed by a trusted CA. You’d either need to compromise a CA and create your own certificate for the website or make the target device trust a custom CA. In the case of a custom CA, the user explicitly needs to perform an action to trust it. How is this not enough on a public network?