Hi passbolt developer here, the reason for building on top of CakePHP was mostly:
- it's been audited multiple time (last in date was by Cure53, financed by mozilla foundation)
- convention over configuration
- good versatility for hosting (= less support)
- lovely community (less big but very friendly)