At least what I’m seeing at work is that AI tools have generated thousands of security reports after scanning all of the old code. So our whole team has been bogged down for months now removing eval(), updating ancient packages, updating docker images that haven’t been rebuilt in years, etc. It shows no improvement to the end user but since all of these vulnerabilities have suddenly become very visible we have to action them all right now.