What? How often does that actually happen?

I don't think I've ever heard of new PHP devs "launching with the built in web server". Django has shipped with a built-in insecure web server for years and no ones crying to fix it.

There's things to fix in PHP, but this is not one.