The Decoder spots a telling inversion: AI has become so good at finding software flaws that discovery is no longer the bottleneck — remediation is. An operation of this scale reads like the first mainstream case of 'AI security debt,' where models surface vulnerabilities faster than any organization can absorb them. We'd argue this is less a Bank of America story than an industry preview: once offensive AI scanning becomes cheap and ubiquitous, every large enterprise faces the same arithmetic. The real question is whether the loop eventually closes — AI patching what AI finds — or whether human patch armies become a permanent budget line. Either way, the economics of security just tilted toward whoever holds the models.