I think the author is right.

It appears that exploitation is not a single script, but it requires careful preparation and adaption to different environments (e.g. mod_php vs php_fpm). Additionally, not every exploit works on every version, which makes exploitation at scale hard.