Software security has always depended on one quiet constraint: the people capable of finding the worst bugs were rare. Anthropic is now claiming that constraint is gone.