@meega: It isn't all that bad, security wise. IIS6 is waay more secure and stable than its predecessors, and is pretty much locked down out of the box.
You then have the possibility to open for whatever features you want, instead of having an insecure web server, and then trying to make it more safe by disabling things.
Pretty much the same feature was available in earlier versions by using the IIS Lockdown tool.