AI app-maker Lovable is facing fresh security questions after researchers found sensitive data exposed across several projects. The findings include passport details, payment information and over 200,000 chat messages accessible without login.