The risk here is that you get collisions or people arbitrarily assign IDs. For example, I could assign an ID of -1 because you made it attr_accessible without any validations.