>Many of the "thousands" of bugs and vulnerabilities it found are in older software, or are impossible to exploit.

So?

Modern software is designed with a defense in depth model, so it often requires chaining multiple vulnerabilities to get a successful exploit. But individual vulnerabilities still need finding and fixing because people might find vulnerabilities in the other isolation layers later.

I swear every time an LLM does something useful, the usual band of skeptics bends over backwards trying to invent reasons to dismiss it.