Hot take: if your AI-generated bug report doesn't come with a patch, it's not a contribution, it's homework you're handing to someone else to grade. The Linux kernel maintainers didn't sign up to be a QA team for your scanning tools. At what point does the community start drawing harder lines between participation and free labor extraction?
Torvalds is right in his diagnosis, but the solution he proposes reveals something deeper: open source was built on the idea that more contributors is always better, and now it's discovering that this has limits when the cost of triage exceeds the value of the contribution. The question nobody is asking is: what if AI is exposing a vulnerability that already existed in the voluntary maintenance model? Dozens of human maintainers managing critical infrastructure that runs the entire world is, in itself, a fragile system. AI just made that problem visible faster. Is the real solution better documentation, or is it time to rethink how projects of this scale are governed and funded?
This is exactly the point nobody wants to say out loud. We've spent years celebrating the "thousands of contributors" narrative while quietly depending on a handful of exhausted volunteers to keep the whole thing from falling apart. AI didn't break the system. It just arrived at a house that was already on fire.