Just talking to some InfoSec guys at a party on Saturday at noon, they couldn't drink because they were headed back into work. It's not just PHP, it's everything. They were "joking" about changing professions, because it sucks and it's getting worse. They can't even use frontier models, just use open weights to not get degraded.

If the Bitcoin Red Team efforts/saga are anything to go by, we have a pig to get through the Python and anyone developing anything sanely will be in better shape on the other side. The caveat is, Bitcoin is 17 years old, and monitored and developed by very security minded people. Much of the infrastructure we use is closer to 60 years old and cobbled together with tinkertoys, COBOL, and chewing gum, so it will likely take longer to get through.

Anyone that doesn't adapt their development process will just get ripped to shreds with their vulnerabilities and the market will do its thing.

But in the meantime, expect at least a few months and maybe years of the question of "what is sleep?" from the security crowd.