[leereeves]

> defense is harder for LLMs than offense. They struggle mightily when pulling together too many threads, and some projects are just too big.

Defense doesn't have to be part of code gen. Any automated attacker (like LLMs) could be used for defense simply by finding exploits, then fixing them by whatever means. People choose not to invest in that.