The proof-of-work analogy for AI cybersecurity is wrong. Bug-finding is intelligence-capped, not compute-capped. Run an inferior model infinite times and it still won't find the OpenBSD SACK bug's multi-step chain. "More GPU wins" is the wrong frame. Better models win.