MarkD
Just explain that your current security posture already includes things like automated patching, urgent out-of-band updates when needed, malware/WAF protection, server hardening, monitoring, and daily backups.
Realistically, all reputable software vendors already have access to these newer AI systems internally and are patching vulnerabilities faster than before. The best thing you can do is keep your stack updated, avoid abandoned/untrusted software, and stick to widely used and actively maintained solutions.
Security is all about layers and reducing risk. If your systems are properly maintained and patched quickly, you’re already doing what matters most.