I gave our developers an AI coding assistant. The security team nearly mutinied

I’ve sat in enough risk meetings to know the sound a bad surprise makes before anyone names it. It usually starts with a pause. Then someone says, “We may need to bring the CISO into this.” That happened over a developer tool.