> most people won't care - and won't notice the security flaws that are going to be rife in such large, and frankly mostly unread, codebases.

I agree. But what I'm trying to say is that we'll soon have automated agents that look for vulnerabilities, in agentic flows, ready to be plugged into ci/cd pipelines.

> Honestly I think the security world is primed for it's most productive years.

In the short term, I agree. In the long run I think a lot of it will be automated. Smart fuzzers, agentic vuln scanning, etc. My intuition is that we'll soon see "GAN"-like pipelines with red vs. blue agents trained in parallel.