After all this time the initial AI Slop report was right:
https://hackerone.com/reports/2298307
Nonce and websockets don't appear at all in the blog post. The only thing the ai slop got right is that by removing strcpy curl will get less issues [submitted about it].
After all this time the initial AI Slop report was right:
https://hackerone.com/reports/2298307