Not using AI to write production code doesn't mean you can't use AI proactively to find vulnerabilities.
Poster wants a "total ban", you can only deduce that means vulnerability management also.
Or you could read the proposal and deduce nothing.
It explicitly excludes security fixes.
Oh the hypocrisy...