Why would you assume Google, Apple, and defense-oriented agencies like CISA wouldn't also have access to those same models, but using them to fix issues?

Its just raising the bar across the board, I don't see how only attackers would benefit.

Attackers only need to win once, defenders need to win every time. The game is skewed in favor of the attackers, and AI only exarcebates this.