The point is that the machine itself is more secure, not the whole ecosystem around it. Nobody claims that Chrome OS will somehow decrease (or increase) the probability on server-side attacks.