Microsoft Server systems for government use have been audited and have strict controls for implementation, hardening, securing, etc.

They're probably more secure than BSD.

>SELinux looks nice on paper - another box to check - but it’s just another mitigation later, not something that can be considered “trusted”.

This is fractally wrong.