Instead, the data suggests that AI is currently better at increasing the volume of vulnerabilities researchers can uncover than at increasing the proportion that attackers actually exploit.

Makes sense, if AI can find an exploit, then everyone is going to know about it pretty soon.