If you've ever pasted code into a chatbot and asked "is this secure?", you already know how that goes. You get a confident answer, a few generic warnings about input validation, and no real idea whether any of it is true.