I really do like NT internals though.
When asked people point to IOCP vs epoll, but I'm not sure how relevant it is now that Linux has io_uring.
(They also point to stable ABIs for drivers, but I am more interested in internals)