Both choices can be secure, it depends on the developer awareness and emphasis to security. If that's what you are asking I recommend you find a security guy to help (hint: probably not here) or learn security yourself.
If I didn't search them here. I won't search them anywhere because Im not building a flowers market. that's why the secure option is to learn that shit my self
If you know how to securely build a website, it doesn't matter what it is designed to do. What you are looking for is not to ask such questions here, but to expand what you know so you can in the future search for what you need and be able to verify it.
What you need is to learn how to get data, not help selecting Python or PHP.
"I'm soo good at security, unlike what was just said, but whatever, you are wrong and you can ask people here (where you said not to rely on information) but whatever" -> Your mom is fat fake-ass security guy that's actually a salesperson that probably makes some good money out of laymen here in Dread.
It depends which one you use better. You can either fuck up or build a secure website using both. Just pick whatever and implement the adequate security tools. The way you use the framework is more important than which framework you use.
What you need is to learn how to get data, not help selecting Python or PHP.
Tip: don't seek shortcuts.