Does anyone really use such things for security?

I highly doubt it. Even if a company does internally, its highly unlikely they will reveal it publically.

One use case is live content moderation or streaming where reasoning models could be a lot slower and its hard to hardcode logic.

No, but great for text mining