Wouldn't surprise me, it's had lots of exposure with all the data leaks. I last looked at passwords sometime in 2010 off the back of the infamous "use bcrypt" post.
Just skimmed the WP ticket, what a horrible amount of effort to cover an edge case of people regressing to a 4 years past dead PHP version.
Correct me if I'm wrong, but aren't there organisations being prosecuted in some jurisdictions for having password security that weak?