16,326 databases with readable tables from ~300K domain scan. PII in >50%. Vibe-coding and missing RLS primary causes. Schema-level analysis validated with spot checks.