“If somebody chooses to turn it off, but it should be turned on by default.”

Transcript evidence from Frank Rietta — The convergence of Ruby on Rails and #AppSec.