Sometimes (or often) things with horrible security flaws "work" but not in the way that they should and are exposing you to risk.
Sometimes (or often) things with horrible security flaws "work" but not in the way that they should and are exposing you to risk.
If you refuse to run AI generated code for this reason, then you should refuse to run closed source code for the same reason.
I don't see how the two correlate - commercial, closed source software usually have teams of professionals behind them with a vested and shared interest in not shipping crap that will blow up in their customers' face. I don't think the motivations of "guy who vibe coded a shitty app in an afternoon" are the same.
And to answer you more directly, generally, in my professional world, I don't use closed source software often for security reasons, and when I do, it's from major players with oodles of more resources and capital expenditure than "some guy with a credit card paid for a gemini subscription."