In reply to JeffC.

@jeffc +1 for you personally not interested to work with ancient tech, but let me ask you something else.

did anyone suggest to you to ditch intel CPUs becuase of spectre, and if anyone would have done so, would you actually follow their advice?
Or a different take, did you fully delete your FB account including whatsapp and instagram?

Security and privacy are not binary states. You are rarely in either of the edges of it, and it is always a judgment call as to if it is worth to invest your time to improve them. I will not spend more than 5 minutes to talk about the real danger of using old PHP - technical debt, but not even one second more as my time is the clients money and he has the full right to spend it in the way he wants.