Why not?

If you can vibecode your app, you can vibecode your cryptography as well.

You may object to it but that, too, would be elitism. And the person vibecoding has no idea why proper cryptography matters anyway. Or why proper anything matters.

This is the ultimate realization of "my ignorance is as good as your knowledge".

I don't think this is necessarily a bad thing.

Because doing enough security reviews to remove all the security bugs gets expensive, and if you use well-reviewed code, it's already been done.