kind of rhymes with the reports of LLM's watching open source PRs and instantly exploiting defects. security by obscurity is so back