it has extremely clear separation of permissions, unlike anything windows has. its very possible to set up a user account that can only use the browser and office programs, and that's incredibly valuable. windows can do this, too, but its messy, spotty, and to the user feels like an afterthought rather than something designed deep into the OS like on unix-likes.