Linode guys comment that .htaccess can receive malware infection and redirect your WordPress website to any spam desired:

https://www.linode.com/community/questions/22059/nginx-vs-litespeedapache-for-wordpress-security

and that Nginx will not be allowed for this type of malware, is it true

what is a better server for WP security