USB sucks everywhere. OpenBSD can panic over USB too. It happened to me. Hubs, faulty USB drives, Chinese gamepads, noname ElCheapo USB Ralink WiFi dongles with dubious designs...
I think the only truly secure OS for this would be Hurd or SeL4+Genode.
I think the only truly secure OS for this would be Hurd or SeL4+Genode.