This is what happens if you let a non expert (or someone with little experience) build you an app with AI.
If your app processes personal info, even if it's just a "sign up with your email to keep updated" list on a landing page, it needs proper security