I will say this:

I’d never work with Hitler’s clone for QA

But if Hitler’s clone finds a real bug, especially a security one? I’m still gonna fix it. I’m not gonna be singing praise of Hitler’s clone. But nothing will ruin your rep faster than not fixing a genuine CVE. Its stupid to die on that hill.

I feel that way about fixing AI bugs when they’re real.