That's a nice, succinct, article - I think it'll help to get some folks started.
The only thing I do that really deviates is I compile apache manually:
./configure --prefix=/usr/local/apache --enable-proxy --enable-proxy-connect --enable-rewrite --enable-deflate --enable-proxy-http --enable-ssl --with-ssl=/usr --enable-vhost-alias --enable-php --enable-so --enable-suexec --with-suexec-caller=nobody --with-suexec-docroot=/home --with-suexec-logfile=/usr/local/apache/logs/cgi.log --with-suexec-uidmin=1000 --with-suexec-gidmin=1000
There are many
guides to harden FreeBSD that are good ideas to check out as well.