The problem with so called "White Hat Hackers", like in the recent case where they stole money from an institution just to tell them to fix a bug, is that their business model is reliant on exploitable bugs being in the software, and so inevitably they will end up creating the bugs so they can "fix" them. This is not a good deed.
And guess what will end up happening, they will be the ones making the LLMs, which you use to write the code, that they hold you hostage with.