1. If everyone is running custom written software that's not shared with anyone else if will be really hard to find vulnerabilities in them

2. I'm sure LLMs are already way better at detecting vulnerabilities than the average engineer. (when asked to do so explicitly)