I wonder which one of these are at least partially due to effortless vibecoding...
Also, if vulnerabilities are so easy to find, it should also be easy to detect them through a simple red team exercise.