You and I wouldn’t build applications naively that could lead to people dying. People who don’t understand what they’re building might.
People are vibe coding at your hospital. They’re vibe coding at your utility company. They’re vibe coding at your pharma lab. I’ve met these people. They’re smart. They have phds. I tell them about SSL.
And then they could do something else that might result in property damage. Not at all comparable to the danger of an unlicensed pilot.
Keeps it private from him and is very careful who she shares it with.
Buys something online from a website she had no idea was built on Lovable (doesn't even know what that is, why would she?).
He finds her address, knock knock.
Unlikely? Yes, at the individual level. But the odds that just one customer out of all the folks using the 4,000 websites estimated by this researcher to leak private information is in a situation where their address becoming public puts them at risk? Probably pretty high...
It's easy to shrug these situations off, especially when you're not affected. But if you had all of the information needed to steal your identity — including your fucking *Passport,* you might understand the severity of the consequences a bit more viscerally. And FFS, who the hell is using Lovable to build a website that does something serious enough to warrant collecting Passport information?
Keep in mind these no-code sites are proliferating at the very same time that LLMs are becoming incredibly effective at finding vulnerabilities — even Postgres delayed their latest release to focus on a backlog of serious bugs uncovered by an LLM (Opus?). sshhole.com is another example of an egregious bug in ssh being uncovered after years in the wild by LLMs. It's really a perfect storm…
I get the point you're trying to make, but computer security as a field has already a big problem with maximalist mindset, and it doesn't help in keeping systems of consequence people actually secure and people safe from danger.
(That doesn't mean I don't appreciate/envy the GDPR, as a US citizen.)
You can watch DIY channels on YouTube where homeowners explain their methods.
In particular, they are vibe-rehabbing entire homes.
The problem are product managers and engineers who build things like Lovable, that are not secure by design. Those products have no right to exist, but their alternatives could exist and let their users focus on what matters, instead of paying web development tax.
The plane analogy would be selling tickets to passengers. Who then don't need a pilot license to get somewhere.
When Equifax thing happened, there was basically no repercussions. And that’s the only data breach I recall being in the news cycle for more than a week. Everything else has just been a blip since then. Also as there were no real repercussions other than some fines, companies took it as a signal that nobody cares (rightfully).
Allowing anyone to build and host a public app without a basic understanding of these things is like letting people fly a passenger plane without a license.