I have a lot of serious ethical concerns about AI and vibe coding. But I do recognize that there are legitimate use cases when used as a tool and not a crutch. And this one really don't seem like the end of the world here.

My concern is that the takeaway from an incident like this is that next time, devs are just going to lie and not tell anyone they used AI. They didn't have to say anything and no one would have ever known, but they're being raked through the coals for responsible disclosure.

If I was a developer, I'd just lie.