I complain about Django all the time, it seems like things could be done better. But I think I'm better with it than without it. It takes care of the vast majority of security issues out of the box. Does bottle do similar?