Built-in, antiquated versions of PHP on web sites are real. I am sure that my wife’s 5.6 isn’t the oldest. Updating to current totally messed with her site’s layout, but that’s better than being vulnerable.