aye its shooms fault
i keep on top of the security patches n shit - the last vulnerability was a problem found with 2.2.3 but ive sorted that 1- there aint been no more bugs found since but i check every other day.
i rekon php is still safer than a cgi board - and its way way faster