php is still a dumpster fire of security vulnerabilities and sloppy design choices, how is it still a thing?