Mirror, Mirror on the Wall, Who Has the Best Infrastructure of Them All?

Mobile app security incidents hit 72% of organizations last year, while unmanaged MCP servers and vanity architecture quietly expand attack surface.

• LLM scanners aren't deterministic, and that's OK: Traditional static analyzers pattern-match for identical results, but Ryan Lloyd and Geoff Belknap argue the real metric is false-positive rate, not repeatability—solved via overlapping models where one LLM judges another's findings.
• MCP servers = uncontracted vendors: Jacob Combs (Tandem Diabetes Care CISO) says developers spin up MCP servers in an afternoon with no security review, echoing the 2010s Dropbox/shadow-IT problem but with agents now able to explain their own 'why.'

Themes, sentiment and reasons are AI-written paraphrases, checked so they never quote an episode. They may contain errors. Not investment advice. Episodes remain the property of their creators.