Be careful with point 2, "Let’s not even talk about job-security".
I know, I know, the startup ecosystem (more specifically, web startups, so I suppose the term engineer refers to that too) are booming right now and nobody can imagine how bad things could ever happen. Yet, often enough, bad and unforeseen things do happen, a boom ends rapidly, lots of people are without jobs. Don't scold the guy for wanting to know where he will be at in a couple of years.