What's the scariest thing you've ever shipped in a vibe-coded project?

We built Trust because, honestly, we shipped some scary stuff. Mine was a payment endpoint with CORS wide open. Yours? No judgment, no naming, no shaming—but if any of you are willing to share what you found (or what we find for you), it'd be a hell of a thread for the next person about to deploy something they vibe-coded at 2am.