It's interesting because he could have said that using slightly different words and had a point and he could have even been right.

Engineers are delicate.

I'm on both sides of that fence always.

Instead of 'don't pent test' it should be 'proportional measures' and definitely should be trying to leverage AI as much as is possible. Which is complicated of course for a company that has a certain kind of brand. They literally do not need to be banging out features.