I don't see this as a defense, I am seeing it as a way to reach to more programmers, and basic security practices be damned in the process.
I have to wonder: what did these people have to gain if PHP got popular (which it did)? That's an egotistical way of popularizing your language.