If anything, they might have written most of the infrastructure using LLMs. It’s easier for vibecode to forget about security because LLMs often forget context or hyperfixate on the wrong features.