It does nicely illustrate that AI may do a deeper scan, but not necessarily a better one.
There are existing rules based scanners for websites. Running one on any typical site will easily spit out more than 100 flagged issues. Some "consultants" will dutifully hand that report over and call it a day, but if you actually go through them, most if not all aren't even actual security flaws. Yes, if I POST data that includes the correct username and password, it will grant me access just as if I had filled in the login form. So what? Yes, if I give an invalid account number, it returns a page with (non-)error code 200. The page says "Access denied".
That isn't to say the AI tool is bad, just that it represents an EVOlution, not a REVOlution.