> We can chalk this up as another example of over-exhuberance by what folks believe LLMs can accomplish vs. what they actually are.

I see no credible corroboration. More likely its folks having no more care for what they are doing than the bots themselves.

> Now, we all pay the consequence, to the tune of hundreds of thousands if not millions of dollars of wasted productivity from teams that have to deal with the resulting fall-out of this usage of “AI”.

People said the same about email spam ... until they engaged spam filters. CVE report slop is simply spam. Complaints are better directed at the filters, not the filtered.