Given Debian’s slow development and focus on stability above all else I doubt this will make any practical difference to contributions that actually end up in releases. And honestly at this point every OS or piece of software needs to have AI reviewing its codebase for vulnerabilities, even if it’s not making any code contributions.