time-to-exploit, mostly. ai helps compress the boring middle, triage, fuzzing, patch diff reading, exploit chaining, so a mediocre attacker gets to a working chain faster. vuln yield per researcher is a fuzzier claim and i’d be wary of it. the post is smuggling in a stronger point than it can support, because the actual baseline is still the old one, human-reviewed code with bad assumptions, ai just lowers the patience required to mine it.