Vibe coding without a security audit is negligence. Here is why I think most founders do not realize it.