> You can create whole web app in one PHP file from scratch and it will have everything including API and DB management layer and be secure and fully functioning.

> Millions are made by average developers developing themes and plugins for wordpress.

Yep, and thanks to people actually believing in that, php is also keeping the security industry alive and well.