A security flaw in Lovable's system allowed access to users' data and sparked online backlash over the startup's response.