And before I go to sleep: Yes, this PHP vuln is Yet Another Thing That Would Not Happen If It Were Written In Rust.