and performance..especially with drupal 7. but yeah it beats WP to secuirity hands down

Um, no its not php's fault. But the framework.You see wp doesnt force you to follow best practices... But it actually is cms.CMS'es are designed for people that dont know to code. Unfortunately though a lot of them think that they can code.. you see the results There are many PHP frameworks that force you to write quality code but unfortunately not famous. in php world everyone knows the cms'es not frameworks

No they are not..if they were,then where is the point of calling release candidates the way we call them?? Hint: Cause it means alpha and beta where not releases^^

rofl, i wish i could upvote you! thats exactly what i thought!