Literally everyone bashes PHP, and it has had very few security problems in its history. Yes, I know it is not a framework, but still.