What the article completely ignores is the fact that there are plenty of security issues in the implementation of the PHP interpreter. Just compare the number of security advisories for bugs in PHP itself to bugs in Python/Perl/Ruby/etc. There is a difference.