That would be all well and fine in the idea world, but this is the PHP core team we're talking about here. They don't give a shit about security, and you have t

That would be all well and fine in the idea world, but this is the PHP core team we're talking about here. They don't give a shit about security, and you have to publicly humiliate them into taking things like this seriously and doing anything about security.