You get regressions in design and security when you: - never documented how the old site work - never asked a good model/person to comb through the old codebase, and write a spec + PRD for how it works - ask a cheap LLM to redesign the whole website (without migrating auth, or some material % of old content)