> you're hopefully not mutating the request object in Rails in hidden places

You have to, that's how rails works.