Would LLMs help with that? Seems like they could be phished as well.

Also, there’s a difference between “know how to be secure” and “actually practice what is known”. You’re right that non-AI security often fails at the latter, but the industry has a pretty good grasp on how to secure computer systems.

AI systems do not have a practical answer to “how to be secure” yet.