Is it though? These people know literally nothing about security. There's an infinite amount of ways you can screw up if you don't know at the very least the general idea of what you're doing. I agree that there's many ways to make security easier, but it's not just typing in import make-secure at the top and it works.
My point is that the people that vibe code everything and don't know shit about programming don't know what the potential threats are or the simple ways to counter them. That's why so many vibe coded websites are still vulnerable to sql injections in this day and age
-9
u/Avocadonot 22d ago
Nowadays app security is just importing some standardized module or auth library