I migth not like Django, but its security is 100x better than Rails. Django fixes stuff right away, and doesn't have any stupid Yaml.load() bullshit.
You could argue that, no matter how prominent a library is, it does not reflect the actual framework. While this is true people could start arguing that Rails doesn't really have an admin interface and this would change the comparison I did.