Your friend vibe coded something that handles people's financial information and/or PII with zero diligence.

This is a no fly zone amigo, that's going to be a hard no from me dawg.

That's not instant tech debt, that's a class action lawsuit for negligence with damages that were I a juror in a trial I would find him liable.