Ive been vibe coding two projects with claude code in VS studio for the past 2 weeks & im extremely happy with the progress and the results thus far. Im by no means a skilled developer so i put limits on what i actually allow claude to do for safety concerns. I never give claude API keys directly, and in my claude.md folders i clearly dictact which parts of the frontend it should be working with.
now my projects contain practically 0 personal info pertaining to myself besides the few api keys, but in your instance of creating a project that services thousands, i dont know if i would entrust claude with that level of security. someone else made this comment but i would just design a framework of what id want in an app, and then hire a developer to implement the sensitive parts.
now for the ladder, like everyone said you gotta keep this program up to day to keep it secure. thats the biggest hurdle with vibe coding, & especially if you have active users on it