Scaffolds are a fine way to learn the Rails conventions, but in several years of doing security assessments in the codebases of some of the world's largest Rails apps, I have never once noticed one being used. Professional Rails developers seem to shun them as a rule.