It's really wild that someone wants to vibecoding while their threat model involved state level bad actor. What you guys need is not toys moving fast, but a team of security experts to ensure your app not being used as bait to trap the whole team. Tragedy is not no tools to use today, tragedy is we ignore dictators in globe reuse same strategy on others and we ignore others' scream,tears and think dictators will spare us and hence not develop these tools, network in day 1. I am no expert,but I would learn from someone who prepare these threats in day 1 instead of vibecoding. And I am glad someone to contribute their expertise to help the hopeless one. Good luck.