There are two factors at play here: Ai is fast at finding and patching bugs. It’s just true. A lot of the bugs aren’t super high priority but can be daisy chained along with another and another and another exploit to eventually have serious consequences. Ai makes it much easier to recognize components of an exploit chain. What would just be a temporary hang for a tester or qa person is immediately recognized as a oob read, deserialization error or any number of other little bitty things that can make up one component of an exploit chain. So yes, we have been using insecure software this whole time.