@miguelgrinberg @glyph "what mysterious force do you think is going to make me change it" I would say that is a combination of the inability to keep up with everybody else, the speed by which security issues are found by LLMs and personal desires. Obviously if you never get hooked on using an agent yourself, the last part does not apply, but the rest will affect most projects unless it's for fun, no?

Also I do object to being called an "booster" or that I would not accept your policy. It does not matter at all to me what decisions you make or how you run your projects. Why would it?

The question is an honest one: I wonder how long those policies last. Because for the most part I have seen that eventually people cave and start using these tools at least for themselves in one form or another or they have to interface with people who do. You won't be able to opt out of slop security reports. If they are valid, they still need to be acted on for a start.