I suppose it was intended as an (insecure) default in case no keys are provided by the user, so as to make nginx start up. The alternative is probably a more complicated wrapper script to remove the old SSL section instead.