> Now you are confusing security of PHP as a platform with security of applications

The parent comment explicitly made this distinction