Wasn't that the correct decision? They put a deprecation warning on it to inform people it was unsafe in server context, while also keeping it.

It was unsafe and surprisingly easy to DOS servers using it incorrectly. And by "incorrectly", I mean how a lot of (most?) people used it with user data. An API that happens to be safe by accident when people use it should be deprecated.