As software gets easier to build, the "trust the origin owner in an open-ended way" gets increasingly ridiculous.

It makes sense for apps that have 25 million users and have a lot to use, but what about something that was vibecoded by some anonymous teenager?