If your application can be significantly diverted from its intended purpose by the presence of instructions in a normal input file, your application is unsuitable for production workloads.

This feels like installing an "antivirus" addon into wordpress instead of updating php.