Comment by kadoban

> I think PHP has in the past explicitly stated its not a security feature.

I'm struggling to think what it's for then?