syslogd is already oomptotected (to not lose logs which may lead to the oom situation).
sshd also needs to be oomprotected for situations where there is no out-of-band console access.
The discussion in arch@ suggestedto add local_unbound too. Local services (including sshd) may rely on it when started.
This change adds sshd and local_unbound _oomprotext=YES to the defaults and documents it in (plus for syslogd) in rc.conf.5.