Let's say you follow a link to a github project and you have to assess whether to trust that code, how do you do it?
Before AI just having a good README and superficially looking good code (we're not going to do a deep review of it) was a gauge of quality that at the very least the person that wrote it knows what it's doing.
How do you do it now? Maybe the AI was expertly guided, but maybe it was vibe-coded by someone who hasn't even heard of basic security principles and your whole data is sent in plain-text somewhere. It doesn't have to be nefarious, it could be a debug feature that was never removed, or maybe the user never asked the llm to "make it prod safe". And there's no way to know unless you read the whole thing, because superficially the README and the code will look as good as any other llm project.
That's problem number one, before you could quickly see if it's made by someone who knows what it's doing, and thus that you can trust. With vibe-coded software not so much.
The second issue is not inherent to vibe-coded software but it's caused by it: it's a sea of garbage. It's very possible that the absolute amount of good software has increased, but it's become harder to find it.
Before AI just having a good README and superficially looking good code (we're not going to do a deep review of it) was a gauge of quality that at the very least the person that wrote it knows what it's doing.
How do you do it now? Maybe the AI was expertly guided, but maybe it was vibe-coded by someone who hasn't even heard of basic security principles and your whole data is sent in plain-text somewhere. It doesn't have to be nefarious, it could be a debug feature that was never removed, or maybe the user never asked the llm to "make it prod safe". And there's no way to know unless you read the whole thing, because superficially the README and the code will look as good as any other llm project.
That's problem number one, before you could quickly see if it's made by someone who knows what it's doing, and thus that you can trust. With vibe-coded software not so much.
The second issue is not inherent to vibe-coded software but it's caused by it: it's a sea of garbage. It's very possible that the absolute amount of good software has increased, but it's become harder to find it.