Applications built by citizen developers using no-code platforms expand the attack surface without the same checks and balances as traditional development.