My impression is that AI didn't replace static code in this place; it replaced a person, who (hopefully) would have been suspicious about sending an account recovery code for e.g. "obamawhitehouse" to e.g. "[email protected]"
You're giving a lot of credit to the human alternative, especially considering that the attacker only needs to find one lazy human.
You're giving a lot of credit to the human alternative, especially considering that the attacker only needs to find one lazy human.