If a model can auto patch vulnerabilities, the hard problem moves from writing fixes to owning them