Your dream vibe-coded app might be a security nightmare.