Never thought I was going to need to mute PHP. That the PHP Foundation has an "AI Security Engineer in Residence" seems to have been lost in the kerfuffle.