Never mind what it's costing the vibe coder to fix this.

The important question is: what was the cost and consequences of the exploits for users of the service?