If you want to put IIS up there, then it will be like all of the IIS boxes out there that so routinely cough up databases and administrative access to the first script kiddie to come knocking.

Setting up Linux is definitely easier than getting IIS right. OTOH getting IIS wrong and not knowing it is easier still...

Cheers,
Ben