A vibe-coded site called Boomberg shipped with a hidden SQL injection vulnerability. The broader pattern is worse than one bad deploy.