OpenClaw seems good at exposing sensitive data. How do you even know anything on that site was generated by an agent? The entire api was out in the open without any sort of validation.