I'm no SQL specialist. But I do know that you can harden a 2000 or 2003 server very easily. And it doesn't make it unusable.
And the user base that's familiar with Windows is about oh, 1,000 times larger than that of non-Windows.'
IIS has great logging, if you enable it and know where to...