Why is this using the md5 hash of the password to generate the key for the aes function instead of something like PBKDF2? Yeah I know the hash isn't stored anyw

Why is this using the md5 hash of the password to generate the key for the aes function instead of something like PBKDF2? Yeah I know the hash isn't stored anywhere, but still, using md5 in a security setting feels wrong.