Infosec is a bit different - this industry is all about (1) expert knowledge and (2) secret sauce. You disclose a part of your secrets, like the security findings, and in exchange your reputation for expert knowledge increases. Telling the world "I automated the boring parts with LLMs" will not only get you "duh, everybody does it now" but will cast doubt on your expertise. That's why these repeated disclaimers at the beginning "we didn't use fuzzers etc., it was all manual process because we knew what to look for" etc.