That's not what they're saying. They're saying llms are getting so good at revealing vulnerabilities that they have to put focus and effort on finding and fixing them before external malicious actors do.

Yeah it's faster to find a bug than to refactor a whole codebase to fix it, they're still using llms to speed up fixing the bugs. If you believe them, anyway.

I do. Their software stacks were so shit and bloated and had many owners with different visions and understanding of what code does what and why and they rely on being closed source to survive penetration, I do believe llms are finding vulnerabilities left and right, and focused refactoring to address legacy human slop can take time, even for a super competent llm that does it correctly in one shot.