The reason I'm thinking maybe it's not so bad, is because which snapshot does it use? How does it know which snapshot of an algorithm is correct and which has a

The reason I'm thinking maybe it's not so bad, is because which snapshot does it use? How does it know which snapshot of an algorithm is correct and which has a bug? What if you have code that's perfectly fine but then you add several new branches, each one with a different critical security vulnerability added in that's intentional, and malevolent? Will the AI be able to detect these vulnerabilities and choose the correct version? It seems so easy to sabotage this thing. Why would anyone be stupid enough to use it? This thing seems like the perfect stupidity detector.