I wholeheartedly agree. I'd e-mailed Lincoln Stein regarding the idea quite some time ago (see the 'See Also' note at the bottom of the README for a link to the perl.org newsgroup article that spawned the idea for me) but finally got the bug in me to go ahead and implement at least a partial solution, sans -nopoison pragma in CGI.pm itself. But in the meantime, unless and until he implements it AS a pragma, we have a viable solution. :) Enjoy!