Devil’s advocate: This could turn out to be a good thing for software security. If each company’s stack is home grown, there will still be vulnerabilities (probably even more of them) but they’ll be less portable compared to today’s monoculture where an exploit for a common component will work almost anywhere.
except, once you get real analysis on open models, you're likely going to see the same insecurities everywhere because the models have blind spots. The same blind spots. The reason distillation works so well is because of the shared nature of their training corpus.
The generation process will be the monoculture. "Oh, model X generates a ton of code with vulnerability Y."