Actually it's probably more secure than the vast majority of frameworks. And certainly it's more secure by default than most web apps. Have you looked into how

Actually it's probably more secure than the vast majority of frameworks. And certainly it's more secure by default than most web apps. Have you looked into how many PHP apps still suffer from obvious SQL injection attacks?