I think it depends on what area of the world you work. We recenty had one of our plant managers build a web portal to keep track of some of our operational tech, with features you wouldn't find in standard products. I've been turning it into a container app that can actually deploy safely into our cloud infrastrcture. It's quite frankly better quality than what most external software companies have provided us with in the past.
Don't get me wrong. It's not great. It would never pass any of our policies for things that actually operate stuff on the power grid, but as an administrative tool that can live in total isolation from the vital networks. It's perfectly fine. It's also not like we would have hired the best software companies to build it otherwise. We'd hire some low-level cheap consultant house who would then likely get cheap student labour to build it. With that in mind though, the AI is much better than what the realistic alternative would be.
Money wise it's also cheaper. It's been roughly €1000 + the time it's taken us both. If I had known they were doing it, I would have rolled out the developer cowork app/skills/whateveryoucallconfigurationsthesedays to them. This would have avoided their AI building it to be depoyed on a VM rather than in our managed k8s in our Azure. It would also have written the code a little different, used UV and maybe django rather than flask. But hey. For what it is, it's like a 90% cost saving compared to buying what would've been a less maintainable and lower quality system.
I think perhaps the greater issue will be finding people who want to extract the gold from the heap of shit and getting it to run in production. I don't personally mind, but it's not like any of my colleagues would've wanted the task.
for an administrative tool the criticality is not determined by the network boundary but by which decisions within the plant are based on these figures
I wonder how much of this "simple but bespoke" stuff would be better served with some customized off the shelf software rather than a vibe coded tool.
There's not a lot of software where users dont really care if it goes wrong.
With the models we got at out disposal, you can easily deploy a kickass internal tool, it's fine even for mvp's unless you're not handling sensitive user data, shooting yourself in the foot is easier than ever, and talking about code smell for most application (especially frontend) does it even matter?
By coincidence, we've been building software for five years that other plant managers are now considering using to keep track of some operational metrics. And I don't think we should put LLMs into our development cycle, simply because the data our software is built for can have critical meaning in some situations.
The insecurity in a vibe-coded web portal isn't that someone hacks it with XSS, it's that after the next vibe-coded release, some X quietly becomes −Y somewhere no one expects.
From this perspective, having no software at all might be better, or as in your case, safer.