There is a difference between an AI doing a security review (which they have become quite accomplished) and generating code that gets committed into the codebase.
Again, how does one verify that the code it has generated isn’t some verbatim chunk of copyrighted code that it happened to be trained on, and it turned out to be the best fit? There’s no guarantee that a model will not do this, even if instructed.
Also, content generated by AI models has already been deemed uncopyrightable, and this includes code. So are some larrtsmof the Linux kernel now able to be copied freely without GPL restrictions? How can you license code or executables compiled from said code if you do not hold the copyright on it?