This is an interesting premise, but doesn't there need to be some level of app owner involvement for a deployment to work? Handling secrets, configuring the environment, etc. If you can just drop AI slop online and it runs, then almost by definition you are not protecting secrets. If you can keep updating it until you like it, how are database migrations run? How do the app owners do any back-end data maintenance at all - do they need to write a web UI just to run basic scripts?

Your write-up leaves more questions than answers.