If they're making something public-facing, and the language and/or framework they're using is known to be more difficult to use in a secure manner, then it's pr

If they're making something public-facing, and the language and/or framework they're using is known to be more difficult to use in a secure manner, then it's probably fair to warn a newcomer away. Otherwise, completely agreed.