People have said that for decades and it wasn't true until recently.

That's why you simply make the LLM part of the CI checks on PRs.

A proper fix maybe. But LLMs can easily make it no longer exploitable in most cases.