I generally agree, but it's an important distinction to make that controllers should not be "dumb". If that's the case, then we need to stop calling them controllers. Instead we should insist that controllers be "lean".
I specifically use dumb to mean that controllers should know as little as possible about the business logic. They should just mediate between requests and responses.