The cookie is "what caught my eye." not realistic phrasing

The cookie contained a pickle-serialized payload, "which was bad enough on its own." maybe not best practice but not bad on it's own

Flask session cookies are signed", not encrypted," so the... LLMs love to tell you what things aren't, as an emphasis on what they are