The desktop UX was good, but nearly every network service on Windows 2000 had a critical vulnerability at some point. The Code Red worm (MS01-033) comes to mind as particularly impactful. This was the golden age of stack smashing.