Fixing is now the bottleneck. Most patches are non-trivial and then each project/maintainer has a preferred coding style, and they’re being inundated with PRs

Fixing is now the bottleneck. Most patches are non-trivial and then each project/maintainer has a preferred coding style, and they’re being inundated with PRs already, and don’t take kindly to slop. LLMs can find the CVE fully zero interaction, so it scales trivially.