> But you didn't see that the source was one level up in the directory tree from the untrustworthy binary blob?

No, silly me. Shortly searched for a src directory, but of course, should have searched for a bin directory, as that’s where vibe coding stores sources /s.