Of course one can dumb down the requirements so that it will handle, but what about "once basic auth is added, check which endpoints should require it and by what clients" - any real work is out of the scope currently
In the future, you could prompt GPT10 with "give me a marketing plan" and its output would be just as terrible as GPT3's.
Leveling up one's prompting skill from zero shot to few shot to agenetic is how you get usable results.