I did not mean this sarcastically. It is much better for bugs, especially security bugs, to surface and be dealt with ASAP. Rails is a fantastic framework, but when you have so many dependencies on external libraries, all contributed by different people, things like this are going to happen. I don't think it has anything to do with Rails in particular.