The Rails team essentially argued that it isn't on them to secure sites built with Rails. I'm getting a good laugh seeing this card played to defend terrible p

The Rails team essentially argued that it isn't on them to secure sites built with Rails. I'm getting a good laugh seeing this card played to defend terrible practice as the norm for what sells itself as an opinionated framework that champions convention over configuration.