If it’s open-source that uses AI to help write or “enhance” code rather than just scan it for problems, then the answer might be yes: https://www.coderabbit.ai/blog/state-of-ai-vs-human-code-generation-report Otherwise, if you keep up with your patches then hopefully in the long term no.

but what about vulnerabilities in the web server? 😱

Many of the older generations have been car brainwashed, sadly.

People upvote because they hate change.

People upvote because big tech has a tendency of forcing the most anti ownership outcome possible on everyone. Here, such an outcome likely would be mandatory passkeys that are set up to require hardware attestation.

One way to reduce that risk is to boycott passkeys until TPM and hardware attestation are removed from the standard. You may not think that’s a fair response, or that such a boycott won’t save us from the inevitable outcome, but nevertheless it’s not a completely irrational reaction.

If it was just to helpfully reduce friction, it wouldn’t be so controversial. The inclusion of any sort of TPM and hardware attestation support at all is what has some people sounding the alarm (in my opinion rightfully).