Why is this still a surprise? LLMs do not really reason and do not really write code. They apply an algorthic approach to produce “code like“ that is not in fact code but is close enough to be compiled and run.
But of course they will hallucinate and make errors. And that means code that is unreliable and vulnerable. And probably hard to maintain over time. Also considering again that LLMs do not reason, asking them to review or audit code is probably a bad idea too.
