But, php is a typeless language with no requirement to pre declare or to pre set variables. Many developers chose to just suppress notices.
And outside of a production environment, those developers are wrong (unlike you, I notice).
DoD, I suggest that you leave error_reporting set at E_ALL, and fix those notices.
Only when it is released in a production website do you set error_reporting to E_ALL & ~E_NOTICE, and set display_errors to off, and log errors instead.
You would also notice that some of phpBB's own security problems arise out of apparently minor problems in validation of input.