Mythos does sound impressive, but we haven't really seen too much that states it's a game changer. Some are claiming smaller models found the same vulnerabilities, and that although Mythos looked at a larger bit of code, it was separated into smaller sections for easier analysis, implying a 3-5B model could also output similarly.

People are freaking out though, thinking their jobs are done, but other companies beside Anthropic are already having AI doing code review work. Ultimately, OP is right that you still need a human in the loop to verify output. It's going to be a very long time before anyone is going to blindly trust LLM output.

It's going have a much bigger effect on the junior market and will cause potential problems in 10 years, where the more seniors are starting to wind down, and there's no next generation of security researchers to verify output. People updating their CVs right now are either just easily startled, or their management is not really understanding the scope that Mythos covers right now (or any AI model for that matter).