I'm glad to see efforts towards improving Ruby on Rails security, it honestly keeps the framework still the most viable choice.