Isn't it obvious that developers should use AI the same way the hackers do - tell the AI to look for exploits?