Lovable apps expose passport details and more than 200K private messages
Source
crissyfield.de
Author
armcat
Date
Why it matters
Apps generated by prompt-to-app platforms often ship Supabase databases readable without login. The study quantifies this across 159k projects, so you know to audit row-level security before shipping AI-built apps.
