Yes,  it easily can be.  My point was,  no language allows you to get away with ignoring security (e.g. there is no free lunch).<p><a href="http:&#x2F;&#x2F;blog.codeclimate.com&#x2F;blog&#x2F;2013&#x2F;01&#x2F;10&#x2F;rails-remote-code-execution-vulnerability-explained&#x2F;" rel="nofollow">http:&#x2F;&#x2F;blog.codeclimate.com&#x2F;blog&#x2F;2013&#x2F;01&#x2F;10&#x2F;rails-remote-cod...</a>