I don’t know, but maybe try clearing that from php.ini
and restarting web server.
I am not sure if that is insecure or somehow incorrect, but at least it would serve as a diagnostic to determine if that is the cause.
On my Ubuntu that value is cleared (empty) so I don’t think the security hinges on that.