Why can't you use an LLM to find vulnerabilities and then hand-code the fix? You don't even have to clean-room implement it; let the LLM write the code, and then reimplement, doing what you can to de-LLM-ify it.

You can. People on Codeberg use LLMs. They are just against spam of low quality projects generated with LLMs.