The big difference is that static code analysis draws a hard line between what it can do and what it can't do, it doesn't have this fuzzy area of "well it can,

The big difference is that static code analysis draws a hard line between what it can do and what it can't do, it doesn't have this fuzzy area of "well it can, but it shouldn't" that AI has (the problem there being that "but it shouldn't" is often lost, not just in ai but in tech in general).