why nobody in foundation management was not intereated in resulta of rhe security audit?

making php is the core of (checks notes) php foundation

or is the management full of completely not technical people who use it to boost their CVs?