I'm sure if somebody hired him for a pentest it'd cost more per vulnerability found.

I think his point was more that he didn't believe it was difficult to find these issues.

Could be Dunning-Kruger, but if AI models continue to get better this trend will surely continue.