As someone who's never driven a Ford (or, indeed, a car), I would not dream of driving one off a cliff, nor would the Github team. It's entirely possible that I would forget to use attr_protected. Github certainly did.

Indeed , seems more akin to buying a second hand car and forgetting to ask if the brakes are actually connected before driving off.