While LLMs are really good at generating content, one of their key weaknesses is their (relative) inability to detect _missing_ content. I'd argue that the mos

While LLMs are really good at generating content, one of their key weaknesses is their (relative) inability to detect _missing_ content. I'd argue that the most impactful software security bugs in the last couple of decades (Heartbleed etc) have been errors of omission, rather than errors of inclusion. This means LLMs are: 1) producing lots more code to be audited 2) poor at auditing that code for the most impactful class of bugs That feels like a dangerous combination.