It's a vulnerability. No one wants it (except attackers). Of course there are some situations that some people actually do want (controlled) remote code execut

It's a vulnerability. No one wants it (except attackers). Of course there are some situations that some people actually do want (controlled) remote code execution, such as ssh.