More small open-source teams using vibe coding is unlikely to improve the broader security problems, unless strong review and hardening practices are in place.