That's only if you consider security to be unproductive!
If you consider it to be productive work, it's a massive productivity boon happening right now. Of course, product managers might disagree...
When I had a brilliant stop on defense, a few savvy fans would appreciate it. When I scored goals, everyone knew.
Some people will much appreciate the holes in Postgres that are being plugged. Many more will be bored with patch releases until new features rollout.
A software affecianado appreciates patches, and might do well to teach laypeople the benefits of a good defense.
Security doesn’t produce anything. So no, it’s not productive by definition.
How many of the security issues found were created by LLMs in the first place, though?
Security work is not productive.
Imagine that the whole city has to install iron doors and window grilles, because wooden doors and glass windows are not safe enough anymore.
That's a lot of work, but is it productive in the end? Probably not.
With AI it's the same. World was fine with lax security approach before. Today it is not fine. Tomorrow we might need to prove every code line before shipping, will that be more productive? Hell, no.