Yes -- the vast majority of IIS implementations are run behind corporate firewalls -- they won't show up in surveys like this. These stats don't show web server popularity, they show the popularity of public web servers.
Even public is debatable, many web application servers or servers requiring accounts likely won't be hit. The percentage of all HTTP requests that are to servers they measure will likely be pretty low.