Where are you getting your information from? Ask a couple of ISPs if they run PHP through CGI, FastCGI or mod_php. Some offer a choice between CGI and FastCGI for more money. The mod_php module has all the same issues as Perl -- runs code as the web server user, segfaults will bring down the web server process with them, etc. This is not a secret -- ask some PHP security experts about it.