I believe we should move into legal advise. Because those vibe coders most likely won't pay bug bounties. But suing them for irresponsible data handling will surely work.