Ok. But mostly its entirely the old software, not the new software, that the bugs are being found in.
What seems more probable is that the same advances that LLMs are shipping to find vulnerabilities will end up baked into developer tooling. So you'll be writing code and using an LLM that knows how to write secure code.