Yes, threat actors can wield language models to bypass defenses, write perfect phishing emails, or generate undetectable malware — but defenders have access to the same arsenal of tools, the same public models, the same APIs, etc. The difference isn’t about what they’re using. It’s about how they apply it.