Yep. Wait until they realize one of their vibe coded apps validates everything client side and their entire DB is open to the world.
Like that never happened with non-vibecoded stuff.
Of course it has, but it's more likely to happen when nobody is paying attention.