Coincidentally I am also someone that not always uses frameworks. I understand why people steer away from them. I am a consultant and I come in a lot of places.

Coincidentally I am also someone that not always uses frameworks. I understand why people steer away from them. I am a consultant and I come in a lot of places. I often see small applications become a huge pile of crap simply because someone in the team thought they should do dependency injection and we will use Spring for that. Somehow a lot of people actually think you can not do dependency injection without a framework. Of course bloat is a huge downside to frameworks and security. The framework and its dependencies are a security risk if you don't keep them updated.