Before you chuckle, you should be sure that you're doing security better than Rails. Read this and see how your framework or custom code stacks up.

http://guides.rubyonrails.org/security.html

Also, ask yourself: "when I have a security vulnerability, how easy is it to fix?" Fixing a Rails vulnerability and deploying the fix to production takes about 2 minutes.