It seems likely that the risk of a supply chain attack will often exceed the risk of a coding agent making a new vulnerability. Open source will shift away from helping you find already-working code to finding already-secured code, or finding new ideas altogether.