AI Slop often drowns out the maintainers with more bugs reports than they can read. These bug reports are often difficult to read and 99% of them require a precondition that is impossible to occur. (I've gotten some that require me to read 2^64 bytes of data, never going to happen in the life of this universe).
So even if there is a real bug somewhere in this crap, I won't see it or probably won't recognize it even if I do read it. Even if I do realize that it might really be a bug, figuring out what is truly wrong from the AI vulnerability report is going to be time consuming. A human report, if my code is open source, often has a description of how to exploit the bug and how to fix it.