Concerns with PHP are less about security and more about language design, at least that’s my take after 22 years of dealing with it off and on (full-time “on” for several years).