They're also using "AI SAST tools", which: I would not expect anything branded as a "SAST" tool to find interesting bugs. SAST is a term of art for "pattern matching to a grocery list of specific bugs".

ZeroPath for example brands itself as "AI" SAST. I agree that these tools do not find anything interesting.