I think the most obvious chicken little sign has been that we've had no catastrophic exploits in the past year due these findings.
Sure LLMs have helped reduce the attack surface and we patch things faster too, but I was really expected a few more Supermarket-level bangers.
There was that PHP thing, as well as *sshole, and how do we know the supermarket attackers didn't use AI?