It is no security threat in any way, but it makes it possible to determine whether you use PHP on your server or not.
Decides whether PHP may expose the fact that it is installed on the server (e.g. by adding its signature to the Web server header). It is no security threat in any way, but it makes it possible to determine whether you use PHP on your server or not.