I know...
I know Struts2 has quite some history.. both of security bugs AND forking.. as it was aoriginally a fork of struts, that got to be "struts 2", as it was way better than the original. Still hate it, I find the approach quite bad, if well meaning.