is that so with c? what happens when language extensions are added just
to be able to compile the kernel? what happens when vendors add compiler
specific extensions that slowly get accepted across the industry? is
that really design by your standards?
Those are implementation issues, not design issues. And I'm not dissing PHP's *implementation* either. The design and specs to C, C++ and Java are there up front, whether or not you choose to implement it badly is up to you. Not saying those languages are perfect, errors of judgement in the design of the language can lead to serious consequences. But not having a design at all like PHP, that does not make me comfortable.
the correct form would be: "You probably can write secure, maintainable
code in PHP, just as you can write secure, maintainable code in C.".
if you grok that statement, you would have just grokked the skill of
writing software.