You are really confusing two things here. I wouldn't voluntarily start any new project in PHP, but that doesn't change the massive amounts of existing PHP code

You are really confusing two things here. I wouldn't voluntarily start any new project in PHP, but that doesn't change the massive amounts of existing PHP code that can benefit from an investment in security. PHP is (sadly) not going anywhere for a long time. Also, as others mentioned, it's just so easy to host PHP based solutions like WP etc that you can't reasonably recommend anything else to a non-technical user. Even someone clueless can figure out how to host something with PHP on cheap shared hosting with a little internet research. Good luck doing the same thing with Python or Ruby or even Rust.