@mhoye I think the bigger question the post (which I was able to read in its entirety without an account, fwiw) raises, is that one cannot ignore hosting and operational factors (e.g. vulnerabilities, cost, etc.), and PHP is uniquely bad in that context.

Applications that are “easy” to write, but practically impossible to host securely and cost effectively, aren’t “easy” at all.