A penetration test found an AI-assisted financial app could restore applicant access from a GUID without independent proof of control.