More like &quot;avoid these particular, obviously risky constructs, which any good security scanner will call out as high-priority trouble spots&quot;.  The two particular constructs he warns against (&quot;render params&quot; and permit! followed by mass assignment) will both get high-priority warnings from Brakeman.