Zalewski is not dismissing AI bug finding, but he keeps dragging the discussion back to repeatable crashes, maintainer workflows, and the boring enterprise doors that attackers can now try faster. The conversation is useful because it treats fuzzing, bug bounties, mitigations, and agent access as operational systems, not as a prophecy contest.