> Whatever they know after training is all they'll ever know.

Feeding enough source material as context can absolutely make them better.

Having something dumb that just cycles through the state of the art for exploits is already absolutely incredible security tooling (if people bother to make it into a process which I'm less optimistic about)