Agreed.
Small open-source teams are shipping with the velocity of full enterprises now. The leverage is real.
More small open-source teams using vibe coding is unlikely to improve the broader security problems, unless strong review and hardening practices are in place.