Ubuntu LTS (the most used in servers) is also outdated packages with security vulnerabilities, so…

The thing is that, Debian and Ubuntu, both apply security patches very fast with minimal implications, making these servers very reliable, stable and safe, unlike closed source alternatives.