yet that version has a number of CVEs (it's also long past upstream support). Looking around I do see that libreswan is listed in https://portscout.freebsd.org/ as needing an upgrade (btw, direct search by package would be nice) libreswan security 4.12 5.3.1 2026-07-04 02:29 GMT 2026-07-04 02:29 GMT but again no hint in that table that this might be important.