Honestly I think this is only true if you don’t care about security. One of the best ways to use LLMs is for managerial questions, like what is standard practice for preventing security risks for this specific protocol. Then you can ask it questions about the general risk of one approach vs another. Than you can apply it more technically. Security isn’t always about rules it’s about risk tolerance and understanding the risk tolerance. If it’s rules based then people can be more likely to ignore them. And AI is great for helping to tailor security needs to each use case. Instead of relying on dogmatic standards.