Security by obscurity is one of the best methods to secure something. Anything PHP is as bad as anything Windows when it comes to being a target. Front ends like HaProxy do real well with being able to control the traffic before it hits the server object. This is real important as Erel has chosen (rightly or wrongly) not to expose many of the settings needed to control the server, when exposed to the wild.
That said, java servlet hosting is where I have been parked. 3 servers behind an haproxy. At least it is an environment I can control for my apps. Almost every app I write is network served somehow.