There was a large effort either right before or after Server 2003 to harden the Windows codebase as a whole.

Certainly it hasn't been 100% rewritten, that'd make no sense. But I'm not going to guess how much of it /has/ been rewritten because like you guessing, it'd be an uneducated one.