> Sounds like every piece of human generated code I’ve ever seen.

Good code is less visible.

The obvious advantage of making your own framework, or your own libraries, say, is that you can centralise all the security implementation. You either will or you won't do that security work, but you can't centralise it if you don't write some sort of library/framework to do it. And if you don't, you're more likely to leave the hole open in some situations.

Vibe coding is "don't write any libraries, just copy-paste and use these existing libraries uncritically".

The worst outcome of this will be NPM full of vibe-coded copy-paste code shoved into opaque modules that nobody has ever really read, that other vibe-coding tools will use uncritically.