I'm not sure open letters are an effective tool, but in this case we need every tool we can get to raise awareness of the point we've reached: we have neglected defense and accelerated offense with AI. All the security concepts and patterns the industry has used and adopted over the years in product security are becoming wrong assumptions. One pattern every vendor follows is raising the bar for an attacker with new mitigations or new layers of obscurity to win time, letting complexity become a security boundary. These old patterns are broken. The data shows they were never very effective against experienced attackers, and now we have an experienced attacker that can be scaled with unprecedented velocity, so winning time is a losing strategy by design. Defenders today don't have time, but we still have an opportunity to change the rules of the game.