Last time I checked it was fully possible run any one of a number of PHP’s debug statements on a production box if you’re foolish enought to do so. How is this any different?
Ironically I had this discussion with my boss eariler today. I give you the same challenge as I gave him - how is this any more destructive or harmful than leaving a print_r(); exit; series in the code?
Answer, it isn’t.
Keeping test code separate from production code is an issue beyond the scope of what this tool addresses.