Oversight by whom? Who is qualified? Random people in the civil service? It seems far beyond them.
Your example is illustrative. Absolutely don’t want the only LLMs capable of finding exploits in the hands of the NSA/some-TLA. I want it in people’s hands so reports can be made and software fixed.