The same way Windows is “fixing bugs” with AI? Large volumes of dubiously tested code is never a good idea

I think the point is the bugs are being FOUND with AI. Not fixed with AI.

It's basically the same concept as open source in general. IE the average layman hears open source and they think "oh so every moron, malicious person etc... can add his own back doors into the code", of course not, the official version is gated and reviewed. What's happening is AI is basically serving as millions of idiots looking through the code for security flaws, and it's finding them. Which then means the humans fixing it need to go into overdrive to fix them before they become zero days.