[sublinear]

The target codebase cannot improve beyond the point that the reports are incorrect and a waste of money.

There is also the question of whether humans can waste so much time reviewing AI code that the vulnerability is not patched before it is exploited. Another one is whether when the human is removed from the loop that the codebase becomes more vulnerable in some other ways.