As bad as strong parameters is, it was still, at the time, a decent improvement over its predecessor, attr_accessible.