If the LLM hallucinates a Python package, someone else might notice that and sneak in a malicious version of that hallucinated package.
Or if it hallucinates a method name, it might be in a code path that goes untested. How often are people using these tools to also write comprehensive test suites?