

Alternatively, many of these exploits are dependent on extremely niche situations that are mostly handled by existing safeguards.
I’d be interested to see the actual real world severity of these - are they actually things that could be used in an exploit in any meaningful way?
RCE is substantially more severe, it’s possible there just aren’t as many, as they aren’t as applicable to highly contrived scenarios


I think also, people forget that open source projects need maintainers who are properly invested.
It’s difficult to imagine a meaningful future for a codebase that you spun up with AI and don’t actually understand yourself.
There’s an expectation of stewardship beyond “yeah I spent 2k on tokens”