The point was unless you also previously cached all your gems somewhere you'd have to deploy using potentially compromised gems from rubygems.