> I lost a server to hackers (temporarily) due to an RoR vulnerability that was exposed through Redmine, so perhaps I'm a bit sensitive.

That's more of a redmine vuln than a ruby one. Someone can write bad/vulnerable code in any language... I know, I write PHP daily :)