[gnoack]

+1

It is also a testament to solid engineering and attention to good security practices in general. These still work, also against fancy new AI attackers.

When sophisticated attacks become cheaper to run, maybe it will (finally) be cheaper to do more solid engineering instead of doing it quick and dirty and ending up in indefinite bug-squashing mode.

[VBprogrammer]

I suspect the easier option is to use AI to review your own code. The arms race between developers and attackers might even make some of the AI valuations come true.