I hadn’t thought of this failure mode, but it’ll almost certainly crop up somewhere. AI doesn’t understand computer security, but neither do intern programmers, so both vibe-coded and manually coded apps are expected to have these types of security holes.