It’s been possible for some time to automatically check for vulnerabilities in installed pkgsrc packages.  However, it requires some initial setup work.  NetBSD now will check automatically if there’s any packages installed.  The same feature could work in DragonFly – I have a post about that even links to the appropriate changes.  Someone want to take this on?