SecurityException Status Codes

Indeed, it would be possible to say that 500 represents system instability.
If exceptions can be caught and recovered, the application should do so.

However, if it is a client-side problem, we should return 4xx, and if it is a server-side problem,
we should return 5xx. For example, if it cannot connect to the database, we can only return 500.

Thus, if the framework throws an exception and returns an inappropriate 500 response,
it is a bug in the framework. Please report a bug or send a PR to fix it.

ci-phpunit-test | CodeIgniter Testing Guide | CodeIgniter 3 to 4 Upgrade Helper