I think we can get mostly there with AI and bug bounties. I think we're right in the middle of "peeling the bandaid off" right now. The code released in the near future will have the same opportunity to run through the 0-day gauntlet. So if it contains exploitable bugs, they generally could have caught them. Sweeten the deal with cash and you can outsource most of that.