Might have something to do with legacy WSUS code still being part of the stack, which relies on IIS.