AI seems to be making things worse, as vibe-coded commits leave hardcoded credentials and other vulnerabilities.