I think you think these multi-paragraph responses you're writing are convincing.
I think the best thing I can do for you is to be blunt about how unconvincing they are.
Very few people with Rails or appsec experience will read them and think that you know what you're doing with regards to security.
You should not be taking "thousands and thousands of dollars" from people. Full stop.