Currently the default is aes-128 which is much weaker, especially for smaller strings like we have here. It made sense for rails since this would be used for a a huge blob that makes the changes un-diffable.