In fairness to Heroku you're citing a security issue with the heroku.com webapp, not an issue with the platform they're selling. Also: as long as traffic spike

In fairness to Heroku you're citing a security issue with the heroku.com webapp, not an issue with the platform they're selling. Also: as long as traffic spikes remain a thing, autoscaling isn't wasteful... The alternatives are your site going down or buying bigger servers than you need in the first place... (That's not to say I approve of heroku though, the foundation it supplies is horrible, and missing basic things like [gzip'd asset transfers](https://stackoverflow.com/questions/12326191/any-way-to-serve-gzip-assets-from-heroku https://stackoverflow.com/questions/12326191/any-way-to-serv...)...)