Don't blame Linux for it. A web server and telnet are not part of Linux. If extra "server" software is included, it should also be secured.