Quick update for anyone who followed us at launch

AI coding tools are amazing and they quietly ship security holes: a Supabase

table with RLS off, an API key sitting in the frontend bundle, a "god-mode"

endpoint with no auth, a chatbot that leaks its system prompt if you ask nicely.