Do you think the performance of "Qwen3-Coder-30B-A3B-Instruct" here is indicative of the reliability of using eg. Opus 5.5 to audit your implementation's security?

I don't think so. For the conclusion you are drawing, a comparison of issues found in manual pen testing but missed by Opus 5.5 would be more relevant.