I benchmarked AI-generated server code across Express, FastAPI, and axum — all scored ~38% on security. The problem is framework design: when security is opt-in, AI opts out. acube makes security the default. Same AI, same spec, score goes from 38% to 90%. Details in benchmarks/report.md.