Frames go back to the 1990s. Like a lot of the web technologies dating to that time period, the security implications of such functionality either weren't very well understood at the time, or weren't considered.