As an industry, we also know two more aspects

1. many have underinvested in security for a long time

2. many are checking out of the development process

I generally think we can improve software with Ai tools, but I'm skeptical the current incentives will lead to this.