Good point. I'm using ActiveModel::Serializers, which is really the "right" way to handle what's exposed, but I think it's better to have an example that's safe by default.