The findings highlight how AI-generated and vibe-coded apps can spill and expose users' data when not configured or secured properly.