This hasn't gotten as much traction but I think adds some interesting additional context here: https://joel.drapper.me/p/ruby-central-security-measures/ (https://news.ycombinator.com/item?id=45428812)