I wonder if PHP compiled with Fil-C would have stopped that bug. My guess is it would have.
My tests show that it would. The post-patch integration tests trap under Fil-C, and the StealMyBitcoin exploit chain traps too.
https://mbrock.github.io/filnix/docs/php.html
It’s also compatible with most PHP native extensions.