Windows has grown so complicated that it is harder to secure. The images below are a complete map of the system calls that occur when a web server serves up a single page of HTML with a single picture. The same page and picture. The more system calls, the greater potential for vulnerability, the more effort needed to create secure applications.
The first picture is of the system calls that occur on a Linux server running Apache.
This second image is of a Windows Server running IIS.