Blame MySQL for that. The PHP API just mirrors the MySQL C API of the same name. https://dev.mysql.com/doc/c-api/8.0/en/mysql-real-escape-string.html

Modern PHP doesn't use it - any modern code uses PDO with prepared statements.