Worked on a PHP project once. Every time I asked why something was done a certain way the answer was "dunno, we copy pasted this code snippet."

Certain popular PHP codebases appear to use a similar methodology.

It's why I consider PHP to be "RCE as a Service".

So much copy/pasted code, some of it REALLY bad, and PHP has a lot of foot-guns that can lead to RCE.