That's indeed the best answer. Another one is that, Opa should provide by default a pretty good level of security, being immune to XSS attacks and database inj

That's indeed the best answer. Another one is that, Opa should provide by default a pretty good level of security, being immune to XSS attacks and database injections. Edit: looking at alternatives, it might also be one the cleanest...