Comment by Sparkyte

All AI is a supply chain risk. I think people should know that about now. You can't keep it in a box. The way code works as a model is that is not super sentient thing with nefarious intentions. It is just pure automaton.

Let me explain, if it learns something from training data to do certain things from code it has online it can install or use a code that is vulnerable from a security perspective.