well ... i know companies that don't give sequential numbers starting at 1 just to hide real numbers.
You mean companies that care about their customers and don't use amateur college-level PHP coding full of security holes?
Is that message implying that PHP is insecure, or am I misreading it?
PS: College-level? I was 13 and I released a perfectly secure Club Penguin Private Server, with multi-pass SHA256...

PPS: Don't do the above unless you like angry Disney lawyers