Many are, but it’s not enough. Yes ai is expected to be used to automate white hatting, and already is by the most reasonable and advanced orgs, but greed and stupidity do exist and always will. Many companies fired or minimized security staff because they wanted to minimize overhead or thought ai would make one security staff member able to do the job of five. Many servers and sites just sit there run by private individuals or small companies that don’t even have a cybersecurity team.

A huge issue is ai tools have done a very specific thing that makes it harder to shore up - it used to be tedious and boring to implement hacks once a vulnerability was discovered, so a vulnerability would sit unused for days, weeks, months. Ai now ca do all that tedious, boring work for you, and lowers the bar for who can. That drastically increases the number of attacks and the discovery and dissemination of zero day hacks. Ai won’t be omniscient, so it won’t prevent everything even when it can be always on and just as capable defensively.