Why are you speculating?
Because the PHP devs and the researchers all explicitly stated that they have PoCs that can exploit it. Are they lying? Exaggerating? Spreading FUD?
I am speculating as to why the ones who have the most information tell us something very different than a "random blogger who tried repos on github".
We don't know, that's why we are asking for evidence.
> I am speculating as to why the ones who have the most information tell us something very different than a "random blogger who tried repos on github".
But do we know they have the most information? Or are they relying on the same thing everyone else is?