To be fair, PHP by itself is not the issue here, the issue is rather being amateurs (Mark, Ross) who started doing a fun project and ended up brokering millions of dollars without having the experience or opsec of doing so. This is what lead to their downfall.