Why vibe-coded apps are still leaking user data in 2026 — Blankdot