PHP isn't the problem, the claim that there are no security issues despite hand rolling every feature is the issue, and it's in no way accurate.

A lot of bad software engineering going on in these comments, downvotes don't change that...