"Security controls should be integrated directly into development platforms and workflows."

Which is a step in the right direction.

But as I've been saying for twenty years or more, the software development process ITSELF must be made more rigorous. How is that not obvious at this point?

We have a civilization based on sand right now. Sooner or later this will cost us - and AI-generated code is making it worse.