The xz attacker spent two years building trust before the sabotage. This AI skipped straight to threats.