I tried a GitHub Copilot PR review as it's been ages since I last did.
It was wrong on 3 out of 3 suggestions it made:
1. It suggested inverting the IP ACL and API key check such that it'd have allowed anyone to purge anything from our CDN cache
2. It said I'd got some basic logic wrong (I hadn't) on 1 of ~20 changes of the same type (var not set or var == "" -> strlen(var) == 0)
3. It made up a service name and wanted me to use that
What a pile of shit.