Reddit Programming Dec 8 Is vibe coding actually insecure? New CMU paper benchmarks vulnerabilities in agent-generated code