Of course, that’s true for those web servers. If kept up to date. If not, the attack surface is actually huge because exploits are well known.