>you can't really criticise an AI lab for doing AI instead of straight up giving money to security researchers

Sure I can, if they - or you - pretend "the entire point" is about useful security work rather than expensive loss-leading marketing and demand creation.

We shouldn't look at this and think "wow AI is super useful for security". We should look and this and think "wow, there's a LOT of capital going into persuading us that AI is super useful for security".

THAT is "the entire point".