That's 100% completely wrong. We've worked with Rails' security team in the past to coordinate releases fixing similar issues, and they've helped us out with discovering and analyzing issues of our own.

They're a great group of people and I've got nothing but good things to say about our work together.

Yet another reason why open source is fantastic: friendly competition can actually be friendly. It rocks.