Still not hearing anything about PHP2Shell being exploited.
If it doesn’t happen, I wonder if it’ll be through a reverse proxy or not.
I have a fair few thoughts around proxies, micro-CDNs and micro-load balancers as security functions at the moment.