That's not necessarily true. Who's to say the security researchers wouldn't have found it if they'd searched the code manually?
I’m hardly going to simp for LLM tools but the fact that the bug existed and no one had reported it seems proof positive no one was about to find it without them
It would have taken a LOT longer but often this kind of manual search is so tedious people just don't do it. LLMs don't get bored.
It's an AI security firm! You might just as productively ask "why did all the other engineers who ever looked at this code not find it, and why was Theori the one to actually surface it?".