I find "searching for malware" to be a plausible use case for some of these "transformer" neural architecture
But I don't really see how in this use case there's a need for massive pretraining/extractive-data-processing on most of the Internet's text and images, which is what's been dubbed "AI" in the popular mind.
The threat modeling tool... maybe I don't understand its users, but I'm having a hard time imagining how using AI there would make the tool more effective