I think you're underestimating how hard it is to shoot yourself in the foot when using the PHP language defaults and the defaults for any modern PHP framework - it's genuinely hard to do.
I still don't think PHP is a good idea for a greenfield project or anything, but they have done a good job of hiding all the footguns.