That's not panicking.

What else do you expect them to do? Pray?

Switching something off is far preferably over being hacked.

Agree, I think switching off any running PHP services *at the power socket* is a pretty rational response at this point.