I like Nginx a lot but apache isn't insecure by comparison. Nginx is possibly more secure out of the box with minimal configs but that's not a given either. You can do dumb things with either product.

    AllowOverride None

That will disable htaccess files. http://httpd.apache.org/docs/2.0/howto/htaccess.html