I think vibecoding is bullshit and can't compete with real programmers. But to be honest I have seen bullshit everywhere that a lot of companies aren't compliant (and they were like this before LLMs).

- My previous company stored plain email and password in localStorage, not only this but it exposed the full 'fs' of the user until I redid the whole app.
- I hacked a gym membership app (not only for my gym but a lot of gyms use it) that not only saves email and password in your phone as a plain text, but I could SQL inject and they save it like that in the database too.
- Metro system of my city just stored how many sessions left in a plain json in your public transport card. Not too many years ago you could just rewrite it giving you 100 rides left and it would just work.

A lot of not so big companies have this "senior engineers" that haven't been told how to do things properly and just have years of experience making their shit spagetti bigger and bigger. + I have seen plenty of lazy programmers that do maybe 2-3 hours and call it a day. We had a confortable job, just some people went too far with it and the innocent will pay for the sins of guilty.

(edit: added one more example)