Every system has "architectural" flaws, 0days and CVEs, that's just a normal day in infosec.
What matters is in practice and in the wild. The fact most internet infrastructure uses Linux is not some collective delusion based on a "common security misconception".
It's years of practical experience at play. If they were really better off using some other OS, the free market would guide it towards that.