One positive result is that you get a lot more variation in vulnerabilities. That probably sounds negative, but it isn't.

As an example, a black hat doesn't get 70% of web sites from one shared bug in PHP. They need to target specific sites, and the exploit isn't likely to work in very many other places.