I think the point should be making sure these AI codes are reviewed by developers, which is hard to do.

Developers write plenty of bad code and comments too, trying to detect AI just feels more like treating the symptom than the actual problem.