Uh, yeah, I thought about Nginx or Apache and would expect them to be more secure then your average self-written application.