Basically all the comments points to how amateurish that exchange was run compared to a real online banking website.

Now how many real banks do run their website using Rails? Ruby?

You guys certainly aren't as stupid as to believe this is the latest major 0-day Rails exploit to create havoc right?

And now comes the answers containing the logical fallacy: "All languages/frameworks have security issues". Which is rubbish in that it would imply that all the languages/frameworks do offer exactly the same level of security...