Ok, I understand what you meant, thanks.
Basically, after I’ve read all of that, it’s clear as day that security is not a priority on Testing. And while band-aid solutions do exist, it’s simply not designed to be secure.
Yeah, I wouldn't run it in a production environment.
As long as optional parameters are placed last, I don't see why not.
PHP8's named parameters lessen the pain of using a function with optional parameters spread around, but I still stick to that rule.