Well if XNU doesnt have built in support for Mandatory Access Control policies than wouldnt it be at a security disadvantage?
But I'll say this... SELinux isnt user friendly and creating policies is painful from what I've read. AppArmor is superior in many respects, and gives SUSE an advantage. I think Windows has MAC features too though I havent done my research. I dont know how complex TrustedBSD is to use, but probably not simple too.
If end users just use the default policies or disable MAC, because its too difficult to use, then they wont be as secure and buffer overrun bugs with software could become a security vulnerability.
Regards,
Vincent