Why Finding Software Vulnerabilities Still Needs More Than AI Alone | Finite State Security Shorts