AI models learn from public code, and public code often contains insecure patterns. Stack Overflow answers prioritize working code over secure code. Tutorial examples skip authentication for brevity.
When you ask for "a login form," you get a login form. You don't automatically get rate limiting, CSRF protection, or secure session handling. You must ask for security explicitly.