Which specifically of my points will be addressed by adding Suhosin? You gave some good advice. Assuming your software still works without cURL and with Suhos

Which specifically of my points will be addressed by adding Suhosin? You gave some good advice. Assuming your software still works without cURL and with Suhosin, yes, you are probably going to avoid some attacks by using your disable_functions list and Suhosin. Still, I think what I and several others take issue with, is giving an example php.ini that was so incomplete and inconsistent with its reasoning.