A 5-minute guide to checking whether your Lovable / Bolt / Replit app is leaking your users' data, and why it probably is. I've been fixing apps built with AI tools like Lovable, Bolt, Replit, and Cursor, and the same handful of serious security holes shows up in almost every one. Not because the founders did anything wrong, but because the tools optimize for "make the demo work," not "keep your users' data safe." To show what I mean, I built a small task manager the way a non-technica...