

It does show that it can be a useful tool, though.
Here, the security researcher was evaluating it and stumbled upon a previously undiscovered security bug. Obviously, they didn’t let the AI create the bug report without understanding it. They verified the answer and took action themselves, presumably analyzing, verifying, and reporting in a professional and respectful way.
The cURL AI spam is an issue at the opposite side of that. But doesn’t really tell us anything about capabilities. It tells us more about people. In my eyes, at least.
I’ve always been surprised by cost numbers mentioned in services and donation requests.
I run my own cheap server which has game servers running in the past, and some other services. I’ve not run any busy services though or fediverse content so I never felt like I could make a reasonable assessment. Just be surprised.