php is still a mess, no amount of syntax sugar can fix the fundamental security issues baked into its design