Slightly safer vibecoding by adopting old hacker habits

I have seen a lot of public discussion around supply-chain attacks on the Python ecosystem, prompt injection risks when using coding agents, and general worries about the security implications of "vibe coding" for the development machine. In some of these discussions I find myself puzzled as to what problem is being solved - and it took me a while to realize that my failure to understand lies in…