I agree that 0-days aren’t numbered. There are so many layers on which tech can be exploited that this is a difficult claim to make.

On the other hand, there are two different kind of exploits: clear holes in the logic, a situation or code path not considered by the coder. And the much harder to catch extremely creative ways to make a program do things it was never designed to do.

I have not seen LLMs doing creative things ever, so I doubt it would catch this second category. But sure, catching some logic holes it can be helpful with.

The only system I’ll accept. Not necessarily for pornography and a lot of “save the children” claims are just pretext for privacy violations, but there are services that legitimately need to check some info and a zero knowledge approach is the most privacy preserving way to do that.