It's one of those things you shouldn't trust LLMs to such an extent; that part should be very solid because the consequences of bad practices are getting to front page of hacker news :)
And it's funny this same argument can be said since Sonnet 3.7. But the issues still pop up.