I just don't agree with the sentiment about how FOSS devs need it because theyre usually one man shows.

I'm a FOSS dev, and yes, I'm a one gal show. But, I was doing this before AI and I'll be doing it the same way long after. I don't want a so called "tool" that's going to hallucinate security problems into my work.