>PHP is no more vulnerable than those languages.
In theory, perhaps not. In practice, much more vulnerable.
In theory, perhaps not. In practice, much more vulnerable.
PHP applications might do suspicious things, by choice. But the runtime itself is fine. Certainly, there are less vulnerabilities in recent years in the PHP runtime than in, say, V8.