> I see companies adding more sloppily written features with AI

I think this is a side-effect of the old product management process adapting to AI. We (as an industry) were never very good at defining features rigorously, because there was a smart human in the loop who had to implement the feature and could push back on sloppy definitions.

Whereas security bugs are easy for the LLM to define and fix.