The obvious advantage of making your own framework, or your own libraries, say, is that you can centralise all the security implementation. You either will or you won't do that security work, but you can't centralise it if you don't write some sort of library/framework to do it. And if you don't, you're more likely to leave the hole open in some situations.
Vibe coding is "don't write any libraries, just copy-paste and use these existing libraries uncritically".
The worst outcome of this will be NPM full of vibe-coded copy-paste code shoved into opaque modules that nobody has ever really read, that other vibe-coding tools will use uncritically.
This makes the assumption that vibe coded software is worse than human coded software. I think that’s already false on average and will quickly become “no contest”. We’ve already seen the best humans can do, ai is just getting started.
