In my book I have a section on "shadow AI" – people bypassing procurement procedures + IT policy to use (and hide) their AI tools.

Vibe-coded apps turn that idea on its head. Now someone can get an entire app running without procurement or IT team knowing. That's dangerous.

You don't have to take my word for it. This Wired article by Andy Greenberg explores the vibe-coded app problem in detail.