You can’t solve AI security problems with more AI