Thinking about it some more.... It is a weird discussion in which wordpress is trying to provide better security to sites running on by definition non secure php version. This is the list of security problem with 5.2 which probably no one is going to patch http://www.cvedetails.com/vulnerability-list/vendor_id-74/product_id-128/version_id-106044/, and those are just the known ones :(