IoT is supported until January 2032, while standard LTSC is only supported until January 2027, which only, like, an extra year or so of support over regular Windows 10. I’ve never heard anything about IoT being less secure but I’m far from being an expert lol.
OP when they try Debian and it’s exactly what it advertises itself as: