It's too risky. People might delete install_locked without realising what it does and introduce a big security hole. install.php really should go.