[RevEng]

One issue with the author's suggestion that AI makes it faster for defenders: the issue was never time to fix, but time to distribute.

My employer is working on a fairly early and small AI platform. Performance issues and other bugs are found regularly. I can usually track it down and have it fixed within an hour. But it's not so easy to distribute that fix. New releases need to be made and there are other changes going into them. The while release needs to be tested (hopefully). We have to update our internal deployments and cloud deployments, which needs careful coordination. Our customers' on-premise deployments are even further behind, often several months.

It takes an hour to fix a bug but months for that fix to reach end users. AI doesn't make that faster.