As Yendor said, a good firewall will prevent many attacks.

If your server was booted from a CD and nothing had permission to write to RAM or the hard disk, then an ancient kernel would be pretty secure. ;-)

I don't know what would be a good argument to rebut them, but the converse is clearly not true (i.e. Short Uptime is not a guarantee of Security).

Cheers,
Scott.