Found the problem after a few agonising days. During a hardening, I set the apache2.system unit in systemd too zealously, making my folders read-only. I unhardened apache2.system, and it's working now.
So the bug is to go against systemd (what else is new). That means that Greg was closest to identifying the problem, with Michel a very close second. Congratulations to both of you!

