do we have the security infrastructure/manpower to handle even more php packages? I'm not sure php is a prime candidate for official backports.
PHP was just an example which was relevant before Etch's release.