IIS is getting better for sure.
Maybe it is just a perception, generally, Unix/Linux is secure than windows, especially for multi-user environment. The permissions can be set to prevent one user from peaking another user's file, even when scripts running on the server are vulnerable.
Another...