I agree with Martian Art Slave, this isn’t funny at all. You can be in the middle of troubleshooting something and all of a sudden you’re confronted with what might be a joke, or might be an actual attack. Worst yet, an unsuspecting client could be using WP as a CMS in the middle of a busy day and get freaked out, in which case they won’t blame WordPress for it…
WordPress needs to change this.