To be honest, rails does seem to be going out of its way to increase its attack surface.