In reply to Jon.

Yes, that sounds perfectly reasonable... it's incredible that WordPress, the largest CMS on the planet, is effectively helping an insecure version of PHP survive in the wild.

It is completely irresponsible.