In [RailsCast 219](http://railscasts.com/episodes/219-active-model?view=asciicast), the following code is offered for creating a class for ferrying data back and forth from forms, but without any ActiveRecord persistence:

```
class Message
  include ActiveModel::Validations

  attr_accessor :name, :email, :content

  validates_presence_of :name
  validates_format_of :email, :with => /^[-a-z0-9_+\.]+\@([-a-z0-9]+\.)+[a-z0-9]{2,4}$/i
  validates_length_of :content, :maximum => 500

  def initialize(attributes = {})
    attributes.each do |name, value|
      send("#{name}=", value)
    end
  end
end

```

I'm new to Ruby, but the `send("#{name}=", value)` seems like an invitation for an attacker to 
assign arbitrary values to arbitrary fields. Is this an issue? A few commenters asked [similar questions](http://railscasts.com/episodes/219-active-model?view=comments#comment_109494), but no response.