Some context on who's writing this... I have built software for 8 years and now run a small AI consultancy. A growing share of our work lately isn't building new products at all, it's rescuing vibe coded ones that already have paying customers. So I get why security dominates the conversation. The leaked keys and open endpoints are real but security is a known category of problem. You can buy an audit for it and the thing I keep running into on these rescue jobs doesn't have an audit and it bo...